last executing test programs: 11.934781626s ago: executing program 3 (id=366): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000400), 0x3, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x101a, 0xffffffffffffffff, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x40, 0x107, 0xfffffffe, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x1142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048055}, 0xc000) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x3af4701e) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x2a020400) bind(r5, 0x0, 0x0) sendfile(r3, r0, 0x0, 0x10000a007) 11.650715608s ago: executing program 5 (id=368): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0), 0x80000) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03S\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\x00\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xdc\xdc\xe6*\x9c\xfdV\x82\x05\xcd@\xb1.P\xc9\xb0^\x83\t\xfd\x1c\x04\xd4*\x9bt:U\xda\xbe\x8f\x91\xc1\x92\xc0\xf0\x9b\xf5\rZ\xcdj\xc4\x9d\"\n\xa9jsB\n\xd4\xeb\xa6k>\xb2X\xf6\x1b\xef\xda\xbb\xc2\xfd\xec\xf1\xbf\xa5\xde#\x050xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_io_uring_setup(0x47a8, &(0x7f00000002c0)={0x0, 0x46b4, 0x80, 0x80000, 0x200}, &(0x7f0000000180), &(0x7f0000000700)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x7676, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x3) 10.091593698s ago: executing program 2 (id=372): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x140, 0x11) r2 = fanotify_init(0x8, 0x1) fanotify_mark(r2, 0x105, 0x48000032, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x737f0c77864bf3b9, 0x0) 10.083904506s ago: executing program 5 (id=373): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x88, 0x1b, 0x0, &(0x7f00000003c0)) 9.179983944s ago: executing program 3 (id=375): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000100)={0x30, 0x5, 0x6000000}, 0x30) 9.111540721s ago: executing program 5 (id=376): socket$alg(0x26, 0x5, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x93) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}, 0x0, 0x0, 0x0) (async) syz_fuse_handle_req(r0, &(0x7f0000000600)="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", 0x2000, &(0x7f0000004c00)={&(0x7f0000000040)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x5, 0x2133810c, 0x7fff, 0xbf2, 0x4, 0x8, 0x0, 0x0, 0x4, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x6c93, 0x4) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) syz_usb_connect(0x0, 0x17e, 0x0, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x202def, 0x0, 0x9, 0x0, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002600)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRESOCT=r1, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) (async) unshare(0x6a040000) 9.109778239s ago: executing program 2 (id=377): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40043d0d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b1375", 0x7e}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/11, 0xb}, {&(0x7f0000000540)=""/207, 0xcf}], 0x2) 8.820783234s ago: executing program 5 (id=379): set_mempolicy(0x3, &(0x7f0000000040)=0x800000ffe, 0x5) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x400000) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000080)) r2 = socket(0x1d, 0x2, 0x6) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {&(0x7f00000008c0), 0x1, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e20, @loopback}}}, 0xa0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) madvise(&(0x7f00000bf000/0x4000)=nil, 0x4000, 0x15) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x6a, 0x10, 0x0, &(0x7f0000000080)) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001a80100003800c0005800800000000000000100003803000018005000c000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d80500060000000000130002006272696467655f696c6176655f30000007000200293a00000500060000000000080001000000000018000180140004004d2906d0880fc8acc30fe2020f9849675000018014000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af080001000000000008000100000000006000018005000600000000000500060000000000080001000000000005000600000000000c00020073797a746e6c30000800010000000000130002006272696467655f736c6176655f30000014000500e078d277f38ed3a40a448f3f6b6763e8e0000c80080025000000000005000600000000001400190003dd96197aca85b64424a37dbda7b69414000700eb050e1ca400188004000100000000000800010000000000140004"], 0x270}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) recvmsg(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10145) r8 = userfaultfd(0x80801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r8, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r9, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r11, 0xc058565d, &(0x7f0000000280)=@multiplanar_userptr={0xb, 0x6, 0x4, 0x2000, 0x0, {0x0, 0x2710}, {0x1, 0x0, 0x7, 0x5, 0x1, 0x1, "99e349c3"}, 0x4, 0x2, {0x0}, 0x8}) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0xfffffffd, 0x10000, 0xfffffffd, 0x0, 0x0, 0xdfb}, 0x1c) 7.665076108s ago: executing program 2 (id=381): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x1e4, 0x24, 0x1, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xe, 0xfff2}, {0xfff1, 0xf}}, [@TCA_STAB={0x1c0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x9, 0x200, 0xb0, 0x1, 0xe17, 0x2, 0x2}}, {0x8, 0x2, [0x8, 0x4, 0xff, 0x6]}}, {{0x1c, 0x1, {0x99, 0x1, 0x0, 0x8, 0x1, 0x8, 0x2, 0x7}}, {0x12, 0x2, [0x0, 0xe, 0x6, 0x0, 0x6, 0x101, 0x4f3]}}, {{0x1c, 0x1, {0x7, 0x1, 0x2, 0x14, 0x2, 0x212, 0x101, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x16, 0x5, 0x4, 0x6, 0x0, 0x4, 0x2, 0x2}}, {0x8, 0x2, [0x51a, 0x7]}}, {{0x1c, 0x1, {0x0, 0x8, 0x9, 0xfffffffa, 0x2, 0x4, 0x2, 0x5}}, {0xe, 0x2, [0x9, 0x5, 0xd, 0x0, 0xaa]}}, {{0x1c, 0x1, {0x4, 0xc, 0xffff, 0x6, 0x0, 0x7, 0x4, 0x7}}, {0x12, 0x2, [0x8000, 0x4, 0x9, 0x5, 0x0, 0x5, 0x22]}}, {{0x1c, 0x1, {0x4, 0x0, 0x101, 0xc92, 0x2, 0x2, 0xfffffffc, 0xfffffffffffffe33}}, {0x8, 0x2, [0xff, 0x2]}}, {{0x1c, 0x1, {0xf0, 0x3, 0x8, 0x3a3e, 0x1, 0x7fffffff, 0x38ad, 0x5}}, {0xe, 0x2, [0xc, 0x599a, 0x8, 0x1, 0x5]}}, {{0x1c, 0x1, {0xfa, 0x1, 0x6, 0x9, 0x0, 0x7, 0x0, 0x2}}, {0x8, 0x2, [0x81, 0x400]}}, {{0x1c, 0x1, {0x2, 0x5, 0x8, 0x5b8a, 0x0, 0x80000001, 0x0, 0x7}}, {0x12, 0x2, [0x8000, 0x8, 0x478, 0xa4, 0xbad, 0x403, 0x2]}}, {{0x1c, 0x1, {0x0, 0x3, 0x4000, 0xe54b, 0x1, 0x3, 0x4}}, {0x4}}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) r9 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x39) r10 = syz_pidfd_open(r9, 0x0) setns(0xffffffffffffffff, 0x40000000) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x7e67ab1c, 0xffffffffffff7fff}, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x88, 0x87, 0x100000}, 0x20) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010215b00010400000200000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r12, @ANYBLOB="08001f0007000000"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x2000c010) r13 = syz_usb_connect(0x4, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="9dbc9ea0c59f3d3ab26d30af925883247a07935ac4ba266e85ec64e6b3418529c829d4c4ec92e16e2acbb4043e81584820ca6b98823e54a4a4995d97a7a97f734793fa4bafe6996a94a0c7892dd127", @ANYRES8=r5, @ANYBLOB="df3b0bb2ab47a1692a3f24efd258972732f437534a7ee37c0067ce8b16bf8462c08dbc", @ANYRESDEC=r10, @ANYRES8=r9, @ANYRES16=r6, @ANYRES64=r8, @ANYBLOB="dd86fdaa93213695f9956788", @ANYBLOB="fdd2ee42d6e150cf1e903a21ef8c94a7788fb052548def79f0dc53ac023d614683eb1014162bfffbb9bd717e116feeb4cc6fcd3536a08912e7f10404fd2f47a7047bda06c8df65b49b75061b5bb2cb52a5a6c7882131c8f7c2d1080a641f204870a3cea6170f359e0663eb8d32eaf84f43ba153a23e67ed80a3ab5084cf1da36921c4cc776c29c72daedc1de242e5c31a903c18e31fb440fac561fe144e079df822f1edb5506bcf249e917902a00e3092031e2b43fc93017fdaf97c4359efe66aeeaa45e96572bb16dac2807222e694542092125fcd6faf44c4606d3343f81e55a892a6281bccbe651cff5a167f0ad4778fa01cf6d0d"], 0x0) r14 = syz_open_dev$dri(&(0x7f0000000200), 0xfffffffffffffff9, 0x40200) ioctl$DRM_IOCTL_CONTROL(r14, 0x40086414, &(0x7f0000000280)={0x1, 0x2}) syz_usb_control_io$printer(r13, 0x0, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000108000000000000000000000000003434b2a09d9cbd6df197959251f9d11c9bfc9b493e5a8fc2a41193cb4eea3c3e7a385251b3a4886f929a70b2cb813787563f278470582f6d4d84dcf13670cbd0573620f43abbf3719a613a64a7b70480d18302b3679b6b3565fa3e3ba06157d50e28afaed5e7b3bb62e7e98fb4c7f6850bb0187f1d146fda9821d16353", @ANYRES32=0x0, @ANYBLOB="31200000000000000c002b80080003000400000008001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x20000050) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)) 7.664765603s ago: executing program 3 (id=382): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) epoll_create1(0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)}], 0x2) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff7000/0x8000)=nil, 0x8000, 0x8, 0x1010, r1, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x0, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x2000077d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="6321a1780e3fe8d9098f1f28f3c1f1895857b6b4afebba414b5998fa7c73702eb715d85b6a7709a53bf91325a9fbf7387371592c3533a8a34a28e9364405bb05cdeedb9ddfbe45a6933c33e5019991d691e8e8817a584f5392630d34c12a00aac5c546266df9fbb755447a0ff32acb32fc4b9c54b7fa15f82a9848478df5354f7158ece711c634aead9f427b8a3e580b3bd0920814473069f285753c945e0baa9072f76c542acf2986649075a243126f6d736b8bfa9a88672388eaa7902fc6c9a3c1b2781d", 0xc5}], 0x1}}], 0x1, 0x20000001) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000100)={0x33, @local, 0x4e22, 0x3, 'lc\x00', 0x2a, 0x0, 0x5a}, 0x2c) 7.273320854s ago: executing program 4 (id=385): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0), 0x80000) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03S\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\x00\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xdc\xdc\xe6*\x9c\xfdV\x82\x05\xcd@\xb1.P\xc9\xb0^\x83\t\xfd\x1c\x04\xd4*\x9bt:U\xda\xbe\x8f\x91\xc1\x92\xc0\xf0\x9b\xf5\rZ\xcdj\xc4\x9d\"\n\xa9jsB\n\xd4\xeb\xa6k>\xb2X\xf6\x1b\xef\xda\xbb\xc2\xfd\xec\xf1\xbf\xa5\xde#\x050xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_io_uring_setup(0x47a8, &(0x7f00000002c0)={0x0, 0x46b4, 0x80, 0x80000, 0x200}, &(0x7f0000000180), &(0x7f0000000700)) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x3) 6.912912136s ago: executing program 4 (id=388): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100039042a6b89e4b862f239a3749815", @ANYRES32=r2, @ANYBLOB="0118020003110000280012800b00010065727370616e00001800028004001200050017000000000005001600"], 0x48}, 0x1, 0x0, 0x0, 0x4041090}, 0x4000020) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3000}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 6.694203762s ago: executing program 0 (id=389): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYRES8=r1], 0x14}}, 0x8081) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000000606010300000000000000000300100a"], 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900442b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) 6.601597407s ago: executing program 4 (id=390): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x140, 0x11) r2 = fanotify_init(0x8, 0x1) fanotify_mark(r2, 0x105, 0x48000032, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x737f0c77864bf3b9, 0x0) 5.785951705s ago: executing program 5 (id=391): r0 = memfd_create(&(0x7f0000000300)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x160\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe28\xe3&:1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xaca\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00\xb2\xc9\xe4\x14A\x92P\x83o\xdb\x1d{E\xe8\xec\x85\xd4\xd2\x19\x18\xfd\xfcc~Y\x8f\xb3\x1d<\x91O\xe7\x04\x11\x1f\xbdz\xf1J\xc2\xb2\xdfH\xa7\xa7\xb80I\xc7P\xe9\n\xc8\xd6\x82\xc0\x1d\x82\x83$ky\xea\x9c5\xf3kF\xf5\xf3\xb2\xf4\r\xe3\xfe\xe0\xef8@|\xf9\x80\v\xf2\x91\xae\xc2\x8e\fC', 0x5) fcntl$addseals(r0, 0x409, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41dee000000003a49490834eb160000020023"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) r5 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="611258000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf6720000000000036000b000fff52004507faff15300000d60600000ee60000bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a4c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd"], &(0x7f0000000100)='GPL\x00'}, 0x94) 5.5950676s ago: executing program 1 (id=392): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', r5, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r6, &(0x7f00000004c0)="bba5fdfa217fc7e68a55e346f721fa8d70e813c87cedbf99a87967e876fd62a5f919136c9d825354f8f9fe54d7839ed1bf92743c03e1bb7310e30536fc7f8320499ea6a44c51880a2eb14f1ba09b4ccade01a2cce2e4c422f1d813d6b90cc0c78647b5079009e1c1f44cbfaeb2e23b9b2caf2060e1660ea192f982591de6d1028a8b0fc19a987b640d07ddf80b254c8688b501083bf1c985c0cb2bfcc99315e5f5320a9e92dc32213139b380e86610972d50b3982fa31020eef602933c7de6", &(0x7f0000000580)=""/169}, 0x20) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r8) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r11, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xa0000, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0x10, 0xb}, {0x0, 0xa858712265c6c23}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x6}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0xc000}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x4}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240000a0}, 0x4028040) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'hsr0\x00', @random="2b0100004ec6"}) 5.545512377s ago: executing program 4 (id=393): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$caif_stream(0x25, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket(0x10, 0x80002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_mount_image$fuse(&(0x7f0000002340), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000004340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r1, &(0x7f00000021c0)={0x18, 0x0, r3, {0x7}}, 0x18) read$FUSE(r1, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r1, &(0x7f0000002140)={0x20, 0x0, r4, {0x0, 0x0, 0x80003ff}}, 0x20) syz_fuse_handle_req(r1, &(0x7f0000008380)="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", 0x2000, &(0x7f0000004e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002200)=ANY=[@ANYBLOB="8000000000000000020000000000000000000000000000000a0000000000000053"], 0x0, 0x0, 0x0, 0x0}) getdents64(r2, &(0x7f0000002240)=""/171, 0xab) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x10) 5.408944565s ago: executing program 0 (id=394): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40043d0d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b1375", 0x7e}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/11, 0xb}, {&(0x7f0000000540)=""/207, 0xcf}], 0x2) 5.193424908s ago: executing program 2 (id=395): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="6e6f646973636172642c6e6f636865636b706f696e745f6d657267652c6661756c745f747970653d30303030303030303030303030303033323736372c6d656d6f72793d6c6f772c666c7573685f6d657267652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313236322c61636c2c6e6f61636c2c636f6d70726573735f63616368652c646973636172642c6e6f657874656e745f63616368652c6e6f71756f74612c636865636b706f696e743d64697361626c652c00363101be2f2414c1ff59cf0ff87782bcde43f7989389b5df0c89a39b9879753e01c3936df8f39b60655e3609ad58e855a62cde73be8487d7f660b8da7993b53c4bea49f4e3f2d6b81984f7eeaafb913ce47a483219b0f7b60a2b1f30eb272e8137a471ec62a32d98bb77dfeb8bb0c56400"/344], 0x8, 0x550f, &(0x7f00000089c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) prlimit64(r0, 0x7, &(0x7f0000000040)={0x1, 0xf}, &(0x7f0000000180)) semop(0x0, &(0x7f0000000000)=[{0x0, 0x5, 0x800}, {0x1, 0xffff, 0x1000}, {0x0, 0x7fc0, 0x800}], 0x3) r2 = semget(0x1, 0x4, 0x39c) semop(r2, &(0x7f00000000c0)=[{0x3, 0x3, 0x1800}], 0x1) ioprio_set$pid(0x2, r0, 0x4004) semop(0x0, &(0x7f0000000280)=[{0x2, 0x3, 0x1000}], 0x1) 4.227266618s ago: executing program 0 (id=396): unshare(0x2c040480) socket$inet6_udplite(0xa, 0x2, 0x88) unshare(0x2c020400) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rseq(&(0x7f0000000240), 0x20, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010026"], 0x1c}}, 0x0) r3 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x9, 0x0) epoll_create1(0x0) syz_io_uring_setup(0x5e48, &(0x7f0000000180)={0x0, 0x0, 0x800, 0x0, 0xfffffffc}, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0x4}, 0x8) write$UHID_CREATE2(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1d"], 0x118) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x2000) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0x40405515, &(0x7f0000000040)={0x400000c, 0x1, 0x8, 0x200, 'syz0\x00', 0x5}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) 4.223588375s ago: executing program 4 (id=397): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1380, 0x0) (async) pwritev(r1, &(0x7f0000000240)=[{&(0x7f0000000080)="187e1518ca1c", 0x6}, {0x0}], 0x2, 0x0, 0x4) 3.276966681s ago: executing program 1 (id=398): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) utimes(0x0, 0x0) setresgid(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x4024044) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in6={0xa, 0x4e24, 0x3, @local, 0x5}, @in={0x2, 0x4e20, @remote}}}, 0x118) 2.162498062s ago: executing program 1 (id=399): socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000140)={0x0, 0x7, 0x0, 0xc, 0xffffffff}) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0x7ffffffff000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') 2.08637724s ago: executing program 0 (id=400): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000520000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.9775261s ago: executing program 2 (id=401): setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r2) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1000000000000004) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}], 0x10) sendto$inet6(r3, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x2000002000000) 1.439509874s ago: executing program 1 (id=402): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000deff11000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x4, 0x1019, &(0x7f0000001200)=""/4121, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.378139953s ago: executing program 4 (id=403): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x1, &(0x7f0000000000)=[{0x7, 0x2, 0x7, 0x7ffc8001}]}) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x802, 0x7, @empty}, 0x1c) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000c80)={[{@compress_force_algo={'compress-force', 0x3d, 'zstd'}}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@ssd_spread}, {@autodefrag}, {@space_cache_v1}, {}, {@flushoncommit}, {@discard_sync}, {@noflushoncommit}, {@enospc_debug}, {@nodiscard}, {@max_inline={'max_inline', 0x3d, [0x31, 0x34, 0x31, 0x70, 0x78, 0x30, 0x6b, 0x35, 0x25]}}, {@user_subvol_rm}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r2, 0xffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r2}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000008000000b1e3d4308fcd83a07127371197ae3110393350b5633a3d3f1602cd0c6ec6235a42e10c69290cc2c839f157eaf2b888082b565b0700000000000000654b1e52db20000000000000000000a2353d59be75fd"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000800850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) timerfd_create(0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') write$binfmt_script(r6, &(0x7f0000000740)={'#! ', './file0', [{0x20, '^'}, {}, {0x20, '/dev/audio#\x00'}, {0x20, 'net/icmp\x00'}, {0x20, '-\\*&/@\xdd[)%]$'}, {}, {0x20, '/dev/rtc0\x00'}, {0x20, '/dev/rtc0\x00'}, {0x20, '/dev/audio#\x00'}, {0x20, '*'}], 0xa, "d7a9416b5afb6d2816970bab33d33b779eea3f0fc818d3e5877844fd2fab8a330544f75e5b78673a8a4e2401526c224214f4e999622b075ffa08f5c283a86f681acc1c05b67d95308a15f668a983310876df76167cb719edfefaf62b0b938372b7f7f485ec3ce2cb798ac0e10dc7cf84149b17d1f85128ffe4641c7880a2d1890fc92e1298fac374bf88ad1b4a85c7d56208ac50ff9a48c6ced718da46cb8e59e0019d339c3937a9286f8aef0697d558ebb01cae8c45511f816ccf3ae0b45e27abc4927bf292e1034db79fd0aec72d4cec5191c41be7b93c7dadad1dbdfd2dc4fb17ae3dd8096ed60dce5df85b96330532532c50a9f03e6f"}, 0x150) preadv(r6, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r7, 0x0, 0xcb, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x9, @vifc_lcl_ifindex, @private=0xa010101}, 0x10) modify_ldt$read(0x0, &(0x7f0000000040)=""/201, 0xc9) syz_open_dev$audion(&(0x7f0000000040), 0x1, 0x820080) openat$rtc(0xffffffffffffff9c, &(0x7f0000002600), 0x101840, 0x0) r8 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x3, 0x8d}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) r11 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r11, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r11, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r11, 0x7ab, &(0x7f0000000040)={&(0x7f0000000780)={{@host}, {@hyper}, 0x400, "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"}, 0x418, 0xfffffffe}) io_uring_enter(r8, 0x567, 0x0, 0x0, 0x0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r12, r12) 1.316978861s ago: executing program 0 (id=404): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @broadcast, @multicast2}, &(0x7f0000000140)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xbd4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) 1.147016866s ago: executing program 1 (id=405): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x140, 0x11) r3 = fanotify_init(0x8, 0x1) fanotify_mark(r3, 0x105, 0x48000032, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x737f0c77864bf3b9, 0x0) 1.067971955s ago: executing program 0 (id=406): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100f2fc4c2608fd1a9c5bac54c2b29d0109000000000104000002c55bef000100000000000000000905cc703d0a8f90957f3d040f2d5aaf248dc48b0f4017e057d4541313455283b4697416a80d4badbe512d6821f2bec2e096b568e7ae06007d69891e1e4ffec6d5bf44436a138dc3cc28cc44aa812ab19e71ea73292955ebc4"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x1, 0x36, {0x36, 0x3, "e22466200adfd74bbb003db25c535047079aebd12a7581278b8dfe9751e1c8ee8ecdba83e8993888aeae67d5a5054ae0e58db842"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41c}}}, &(0x7f0000000340)={0x34, &(0x7f00000000c0)={0x0, 0x8, 0x2d, "1babe3c5d96e9634406dd27b93fb266a0c2cf59e723411e6d0699ba9e3e1083968128bb446443e0e475587d633"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x4f}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000240)={0x20, 0x0, 0x5c, {0x5a, "c19134603d6098260a3cf0b97dfb86eff1cf1c62edda822fde7f409d85efe6b66655768c3d8956ace8e9ef05b3445a36e56fb9396fa608037a8af6346e83b7b763c9e608e818deb91c6f6facd69ecae13edf5c5148990e979ea0"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0x40}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x6}}) 976.131577ms ago: executing program 3 (id=407): r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000009c0), 0x13, 0x56b, &(0x7f0000000440)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', '', [], 0xa, "1136e7803e4f0540654905693f70f39a43fbc7f4b3d06cac6e4715d586f55a4437a35045f900b65d3d05e4bd2b483f968ed7dae81ea52b94f565be73066515b795b58a939fd4411af7"}, 0x4d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = userfaultfd(0x80001) r4 = accept4$ax25(r2, &(0x7f0000000280)={{0x3, @null}, [@bcast, @null, @null, @null, @default, @rose, @bcast]}, &(0x7f0000000100)=0x48, 0x80000) setsockopt$sock_int(r4, 0x1, 0x23, &(0x7f0000000180)=0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x7, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0xcd}]}, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x33}, 0x94) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x5}) ioctl$XFS_IOC_FSGROWFSLOG(r2, 0x4008586f, &(0x7f0000000380)={0x5, 0x3}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x3d, 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x7, 0x25}}, './file1\x00'}) openat$cgroup_ro(r6, &(0x7f0000000a00)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 905.603479ms ago: executing program 1 (id=408): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000240)='-$.\x00', 0x44402, 0x0, 0x0, &(0x7f00000002c0)={@_ha_fsid}, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) syz_open_procfs$namespace(0x0, 0x0) ptrace$peek(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) write$uinput_user_dev(r3, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0x7, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x7fffffff, 0x51, 0x8, 0x800, 0xa4d, 0x3ff, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x9, 0x80000005, 0x12, 0x800, 0xc, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x0, 0x3, 0x5, 0x4009, 0x80, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x9e, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f16, 0xc, 0x2, 0x9, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x20002, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x2, 0x2b0, 0x3, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x140, 0x2, 0x2, 0x1000000c, 0x0, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0x7fffffff, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x8000200, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0xd, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x88, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x1, 0x0, 0xffffffff, 'syz0\x00', 0x71}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) preadv(r0, &(0x7f0000003380)=[{&(0x7f0000002180)=""/168, 0xa8}], 0x1, 0x0, 0x10000) read$FUSE(r0, &(0x7f00000033c0)={0x2020}, 0x2020) r5 = io_uring_setup(0x1778, &(0x7f00000000c0)={0x0, 0x4, 0x3000}) poll(&(0x7f0000000740)=[{r5, 0x10}], 0x1, 0xed) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x8000, 0x20, 0x1, 0xec, {{0x7, 0x4, 0x1, 0x2a, 0x1c, 0x64, 0x0, 0x80, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x6}, {[@noop, @rr={0x7, 0x7, 0xa5, [@empty]}]}}}}}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0xf5, r6, 0x1, 0x2, 0x6, @remote}, 0x14) 0s ago: executing program 3 (id=409): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280), 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40043d0d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b1375", 0x7e}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/11, 0xb}, {&(0x7f0000000540)=""/207, 0xcf}], 0x2) kernel console output (not intermixed with test programs): 10 [ 99.895894][ T65] do_writepages+0x32e/0x550 [ 99.895929][ T65] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.895959][ T65] ? reacquire_held_locks+0x104/0x190 [ 99.895990][ T65] ? writeback_sb_inodes+0x42a/0x1940 [ 99.896035][ T65] __writeback_single_inode+0x133/0x1060 [ 99.896076][ T65] ? do_raw_spin_unlock+0xf5/0x210 [ 99.896118][ T65] writeback_sb_inodes+0x92e/0x1940 [ 99.896185][ T65] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 99.896221][ T65] ? do_raw_spin_lock+0x12b/0x2f0 [ 99.896300][ T65] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.896330][ T65] ? rcu_is_watching+0x15/0xb0 [ 99.896360][ T65] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.896399][ T65] wb_writeback+0x445/0xad0 [ 99.896441][ T65] ? queue_io+0x2b1/0x450 [ 99.896486][ T65] ? __pfx_wb_writeback+0x10/0x10 [ 99.896525][ T65] ? do_raw_spin_lock+0x12b/0x2f0 [ 99.896580][ T65] wb_workfn+0x3f8/0xef0 [ 99.896608][ T65] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.896637][ T65] ? look_up_lock_class+0x57/0x110 [ 99.896696][ T65] ? __pfx_wb_workfn+0x10/0x10 [ 99.896723][ T65] ? kasan_quarantine_put+0xbb/0x1f0 [ 99.896759][ T65] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.896788][ T65] ? do_raw_spin_lock+0x12b/0x2f0 [ 99.896822][ T65] ? lock_acquire+0x106/0x330 [ 99.896850][ T65] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 99.896890][ T65] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.896923][ T65] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.896956][ T65] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.896991][ T65] ? process_scheduled_works+0xa0f/0x17a0 [ 99.897018][ T65] ? process_scheduled_works+0xa0f/0x17a0 [ 99.897048][ T65] process_scheduled_works+0xaec/0x17a0 [ 99.897108][ T65] ? __pfx_process_scheduled_works+0x10/0x10 [ 99.897133][ T65] ? do_raw_spin_lock+0x12b/0x2f0 [ 99.897172][ T65] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 99.897215][ T65] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.897250][ T65] worker_thread+0xda6/0x1360 [ 99.897308][ T65] kthread+0x388/0x470 [ 99.897344][ T65] ? __pfx_worker_thread+0x10/0x10 [ 99.897370][ T65] ? __pfx_kthread+0x10/0x10 [ 99.897406][ T65] ret_from_fork+0x51e/0xb90 [ 99.897439][ T65] ? __pfx_ret_from_fork+0x10/0x10 [ 99.897466][ T65] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.897501][ T65] ? __switch_to+0xc7d/0x1400 [ 99.897547][ T65] ? __pfx_kthread+0x10/0x10 [ 99.897583][ T65] ret_from_fork_asm+0x1a/0x30 [ 99.897640][ T65] [ 99.897650][ T65] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 100.115311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 100.222277][ T65] CPU: 0 UID: 0 PID: 65 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 100.222309][ T65] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 100.222326][ T65] Workqueue: writeback wb_workfn (flush-7:0) [ 100.222368][ T65] Call Trace: [ 100.222378][ T65] [ 100.222389][ T65] dump_stack_lvl+0xe8/0x150 [ 100.222426][ T65] f2fs_handle_critical_error+0x37c/0x540 [ 100.222469][ T65] f2fs_write_end_io+0xc1d/0xfd0 [ 100.222528][ T65] __submit_merged_bio+0x256/0x650 [ 100.222576][ T65] __submit_merged_write_cond+0x269/0x530 [ 100.222618][ T65] f2fs_write_data_pages+0x2806/0x3360 [ 100.222699][ T65] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 100.222802][ T65] ? unwind_next_frame+0xa5/0x23c0 [ 100.222838][ T65] ? ret_from_fork+0x51e/0xb90 [ 100.222866][ T65] ? ret_from_fork_asm+0x1a/0x30 [ 100.222956][ T65] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 100.222994][ T65] do_writepages+0x32e/0x550 [ 100.223030][ T65] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.223059][ T65] ? reacquire_held_locks+0x104/0x190 [ 100.223090][ T65] ? writeback_sb_inodes+0x42a/0x1940 [ 100.223135][ T65] __writeback_single_inode+0x133/0x1060 [ 100.223175][ T65] ? do_raw_spin_unlock+0xf5/0x210 [ 100.223217][ T65] writeback_sb_inodes+0x92e/0x1940 [ 100.223290][ T65] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 100.223323][ T65] ? do_raw_spin_lock+0x12b/0x2f0 [ 100.223413][ T65] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.223441][ T65] ? rcu_is_watching+0x15/0xb0 [ 100.223471][ T65] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.223512][ T65] wb_writeback+0x445/0xad0 [ 100.223559][ T65] ? queue_io+0x2b1/0x450 [ 100.223609][ T65] ? __pfx_wb_writeback+0x10/0x10 [ 100.223642][ T65] ? do_raw_spin_lock+0x12b/0x2f0 [ 100.223700][ T65] wb_workfn+0x3f8/0xef0 [ 100.223727][ T65] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.223755][ T65] ? look_up_lock_class+0x57/0x110 [ 100.223817][ T65] ? __pfx_wb_workfn+0x10/0x10 [ 100.223844][ T65] ? kasan_quarantine_put+0xbb/0x1f0 [ 100.223879][ T65] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.223908][ T65] ? do_raw_spin_lock+0x12b/0x2f0 [ 100.223940][ T65] ? lock_acquire+0x106/0x330 [ 100.223968][ T65] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 100.224008][ T65] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.224041][ T65] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.224074][ T65] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.224110][ T65] ? process_scheduled_works+0xa0f/0x17a0 [ 100.224136][ T65] ? process_scheduled_works+0xa0f/0x17a0 [ 100.224166][ T65] process_scheduled_works+0xaec/0x17a0 [ 100.224233][ T65] ? __pfx_process_scheduled_works+0x10/0x10 [ 100.224258][ T65] ? do_raw_spin_lock+0x12b/0x2f0 [ 100.224297][ T65] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 100.224340][ T65] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.224376][ T65] worker_thread+0xda6/0x1360 [ 100.224441][ T65] kthread+0x388/0x470 [ 100.224476][ T65] ? __pfx_worker_thread+0x10/0x10 [ 100.224501][ T65] ? __pfx_kthread+0x10/0x10 [ 100.224538][ T65] ret_from_fork+0x51e/0xb90 [ 100.224575][ T65] ? __pfx_ret_from_fork+0x10/0x10 [ 100.224601][ T65] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.224630][ T65] ? __switch_to+0xc7d/0x1400 [ 100.224676][ T65] ? __pfx_kthread+0x10/0x10 [ 100.224712][ T65] ret_from_fork_asm+0x1a/0x30 [ 100.224771][ T65] [ 100.225915][ T65] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 100.526365][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.624304][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.644148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.729335][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.113826][ T6011] usb 3-1: USB disconnect, device number 2 [ 101.692510][ T6000] loop3: detected capacity change from 0 to 32768 [ 101.822430][ T6000] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.13 (6000) [ 101.926832][ T6000] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 101.986865][ T6000] BTRFS info (device loop3): using blake2b checksum algorithm [ 102.074398][ T6000] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 102.079521][ T6000] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 102.112102][ T6000] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 102.134676][ T6000] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 102.195500][ T6000] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 102.268200][ T6000] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 102.352922][ T6000] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 102.399434][ T6000] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 102.482279][ T6040] binder: 6038:6040 ioctl c0306201 2000000001c0 returned -14 [ 102.525119][ T6009] loop4: detected capacity change from 0 to 32768 [ 102.555712][ T6000] BTRFS error (device loop3): open_ctree failed: -12 [ 102.592353][ T6009] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop4": -EINTR [ 103.114667][ T6053] ubi31: attaching mtd0 [ 103.151752][ T6053] ubi31: scanning is finished [ 103.156691][ T6053] ubi31: empty MTD device detected [ 104.096278][ T6053] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 104.331330][ T6061] netlink: 68 bytes leftover after parsing attributes in process `syz.3.26'. [ 104.474097][ T5920] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.477941][ T6068] loop5: detected capacity change from 0 to 512 [ 104.664179][ T6068] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 104.698851][ T6068] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.763735][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 104.795753][ T5920] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 104.804185][ T6072] loop0: detected capacity change from 0 to 64 [ 104.861340][ T5920] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.901323][ T6075] loop3: detected capacity change from 0 to 512 [ 104.914487][ T6068] FAT-fs (loop5): FAT read failed (blocknr 128) [ 104.965337][ T6075] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 105.053183][ T6075] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 105.080878][ T5920] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.091316][ T5920] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.101311][ T5920] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.115774][ T5920] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 105.125587][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.805293][ T5920] usb 5-1: usb_control_msg returned -32 [ 105.810933][ T5920] usbtmc 5-1:16.0: can't read capabilities [ 105.947191][ T6075] FAT-fs (loop3): FAT read failed (blocknr 128) [ 106.152415][ T1211] usb 5-1: USB disconnect, device number 2 [ 106.202285][ T6082] fuse: Bad value for 'fd' [ 106.229749][ T6083] loop5: detected capacity change from 0 to 64 [ 106.543848][ T6086] loop0: detected capacity change from 0 to 8 [ 107.147671][ T6086] SQUASHFS error: xz decompression failed, data probably corrupt [ 107.155735][ T6086] SQUASHFS error: Failed to read block 0x108: -5 [ 107.162081][ T6086] SQUASHFS error: Unable to read metadata cache entry [106] [ 107.169418][ T6086] SQUASHFS error: Unable to read inode 0x11f [ 107.240768][ T31] audit: type=1800 audit(1770851840.047:3): pid=6083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.32" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 107.522335][ T6090] loop3: detected capacity change from 0 to 40427 [ 107.531488][ T31] audit: type=1800 audit(1770851840.077:4): pid=6083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.32" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 107.682653][ T6090] F2FS-fs (loop3): invalid crc value [ 107.757111][ T6073] loop2: detected capacity change from 0 to 32768 [ 107.810912][ T6090] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 107.820782][ T6090] F2FS-fs (loop3): Start checkpoint disabled! [ 107.843717][ T6090] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 107.858538][ T6090] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 107.912313][ T31] audit: type=1800 audit(1770851840.697:5): pid=6090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.34" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 108.291520][ T6094] loop0: detected capacity change from 0 to 512 [ 108.864209][ T6094] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 108.881956][ T6094] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.096526][ T6107] snd_dummy snd_dummy.0: control 2:0:8:syz0:0 is already present [ 109.096727][ T1334] kworker/u8:6: attempt to access beyond end of device [ 109.096727][ T1334] loop3: rw=1, sector=77824, nr_sectors = 408 limit=40427 [ 109.215971][ T1334] kworker/u8:6: attempt to access beyond end of device [ 109.215971][ T1334] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 109.232812][ T6094] FAT-fs (loop0): FAT read failed (blocknr 128) [ 109.298824][ T1334] CPU: 0 UID: 0 PID: 1334 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 109.298861][ T1334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 109.298877][ T1334] Workqueue: writeback wb_workfn (flush-7:3) [ 109.298919][ T1334] Call Trace: [ 109.298928][ T1334] [ 109.298938][ T1334] dump_stack_lvl+0xe8/0x150 [ 109.298976][ T1334] f2fs_handle_critical_error+0x37c/0x540 [ 109.299018][ T1334] f2fs_write_end_io+0xc1d/0xfd0 [ 109.299074][ T1334] __submit_merged_bio+0x256/0x650 [ 109.299114][ T1334] __submit_merged_write_cond+0x269/0x530 [ 109.299154][ T1334] f2fs_write_data_pages+0x2806/0x3360 [ 109.299227][ T1334] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 109.299318][ T1334] ? unwind_next_frame+0xa5/0x23c0 [ 109.299354][ T1334] ? ret_from_fork+0x51e/0xb90 [ 109.299383][ T1334] ? ret_from_fork_asm+0x1a/0x30 [ 109.299454][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.299488][ T1334] ? __lock_acquire+0x6b5/0x2cf0 [ 109.299521][ T1334] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 109.299559][ T1334] do_writepages+0x32e/0x550 [ 109.299594][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.299623][ T1334] ? reacquire_held_locks+0x104/0x190 [ 109.299653][ T1334] ? writeback_sb_inodes+0x42a/0x1940 [ 109.299699][ T1334] __writeback_single_inode+0x133/0x1060 [ 109.299738][ T1334] ? do_raw_spin_unlock+0xf5/0x210 [ 109.299780][ T1334] writeback_sb_inodes+0x92e/0x1940 [ 109.299846][ T1334] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 109.299881][ T1334] ? do_raw_spin_lock+0x12b/0x2f0 [ 109.299961][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.299990][ T1334] ? rcu_is_watching+0x15/0xb0 [ 109.300019][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.300058][ T1334] wb_writeback+0x445/0xad0 [ 109.300099][ T1334] ? queue_io+0x2b1/0x450 [ 109.300144][ T1334] ? __pfx_wb_writeback+0x10/0x10 [ 109.300178][ T1334] ? do_raw_spin_lock+0x12b/0x2f0 [ 109.300232][ T1334] wb_workfn+0x3f8/0xef0 [ 109.300260][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.300289][ T1334] ? look_up_lock_class+0x57/0x110 [ 109.300347][ T1334] ? __pfx_wb_workfn+0x10/0x10 [ 109.300375][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.300409][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.300438][ T1334] ? do_raw_spin_lock+0x12b/0x2f0 [ 109.300472][ T1334] ? lock_acquire+0x106/0x330 [ 109.300505][ T1334] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 109.300544][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.300577][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.300610][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.300645][ T1334] ? process_scheduled_works+0xa0f/0x17a0 [ 109.300672][ T1334] ? process_scheduled_works+0xa0f/0x17a0 [ 109.300701][ T1334] process_scheduled_works+0xaec/0x17a0 [ 109.300761][ T1334] ? __pfx_process_scheduled_works+0x10/0x10 [ 109.300786][ T1334] ? do_raw_spin_lock+0x12b/0x2f0 [ 109.300825][ T1334] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 109.300867][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.300902][ T1334] worker_thread+0xda6/0x1360 [ 109.300948][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.300977][ T1334] ? __kthread_parkme+0x19c/0x1f0 [ 109.301015][ T1334] kthread+0x388/0x470 [ 109.301050][ T1334] ? __pfx_worker_thread+0x10/0x10 [ 109.301076][ T1334] ? __pfx_kthread+0x10/0x10 [ 109.301112][ T1334] ret_from_fork+0x51e/0xb90 [ 109.301145][ T1334] ? __pfx_ret_from_fork+0x10/0x10 [ 109.301172][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.301201][ T1334] ? __switch_to+0xc7d/0x1400 [ 109.301246][ T1334] ? __pfx_kthread+0x10/0x10 [ 109.301282][ T1334] ret_from_fork_asm+0x1a/0x30 [ 109.301339][ T1334] [ 109.301349][ T1334] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 109.516393][ T6114] netlink: 68 bytes leftover after parsing attributes in process `syz.4.43'. [ 109.568880][ T1334] CPU: 0 UID: 0 PID: 1334 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 109.568912][ T1334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 109.568929][ T1334] Workqueue: writeback wb_workfn (flush-7:3) [ 109.568969][ T1334] Call Trace: [ 109.568979][ T1334] [ 109.568989][ T1334] dump_stack_lvl+0xe8/0x150 [ 109.569026][ T1334] f2fs_handle_critical_error+0x37c/0x540 [ 109.569069][ T1334] f2fs_write_end_io+0xc1d/0xfd0 [ 109.569130][ T1334] __submit_merged_bio+0x256/0x650 [ 109.569171][ T1334] __submit_merged_write_cond+0x269/0x530 [ 109.569214][ T1334] f2fs_write_data_pages+0x2806/0x3360 [ 109.569295][ T1334] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 109.569398][ T1334] ? unwind_next_frame+0xa5/0x23c0 [ 109.569434][ T1334] ? ret_from_fork+0x51e/0xb90 [ 109.569462][ T1334] ? ret_from_fork_asm+0x1a/0x30 [ 109.569545][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.569574][ T1334] ? __lock_acquire+0x6b5/0x2cf0 [ 109.569608][ T1334] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 109.569646][ T1334] do_writepages+0x32e/0x550 [ 109.569682][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.569710][ T1334] ? reacquire_held_locks+0x104/0x190 [ 109.569740][ T1334] ? writeback_sb_inodes+0x42a/0x1940 [ 109.569786][ T1334] __writeback_single_inode+0x133/0x1060 [ 109.569825][ T1334] ? do_raw_spin_unlock+0xf5/0x210 [ 109.569867][ T1334] writeback_sb_inodes+0x92e/0x1940 [ 109.569940][ T1334] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 109.569974][ T1334] ? do_raw_spin_lock+0x12b/0x2f0 [ 109.570063][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.570092][ T1334] ? rcu_is_watching+0x15/0xb0 [ 109.570122][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.570162][ T1334] wb_writeback+0x445/0xad0 [ 109.570205][ T1334] ? queue_io+0x2b1/0x450 [ 109.570251][ T1334] ? __pfx_wb_writeback+0x10/0x10 [ 109.570284][ T1334] ? do_raw_spin_lock+0x12b/0x2f0 [ 109.570342][ T1334] wb_workfn+0x3f8/0xef0 [ 109.570370][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.570398][ T1334] ? look_up_lock_class+0x57/0x110 [ 109.570460][ T1334] ? __pfx_wb_workfn+0x10/0x10 [ 109.570493][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.570527][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.570555][ T1334] ? do_raw_spin_lock+0x12b/0x2f0 [ 109.570588][ T1334] ? lock_acquire+0x106/0x330 [ 109.570616][ T1334] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 109.570656][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.570689][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.570722][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.570758][ T1334] ? process_scheduled_works+0xa0f/0x17a0 [ 109.570784][ T1334] ? process_scheduled_works+0xa0f/0x17a0 [ 109.570814][ T1334] process_scheduled_works+0xaec/0x17a0 [ 109.570882][ T1334] ? __pfx_process_scheduled_works+0x10/0x10 [ 109.570906][ T1334] ? do_raw_spin_lock+0x12b/0x2f0 [ 109.570945][ T1334] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 109.570988][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.571025][ T1334] worker_thread+0xda6/0x1360 [ 109.571076][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.571105][ T1334] ? __kthread_parkme+0x19c/0x1f0 [ 109.571145][ T1334] kthread+0x388/0x470 [ 109.571180][ T1334] ? __pfx_worker_thread+0x10/0x10 [ 109.571205][ T1334] ? __pfx_kthread+0x10/0x10 [ 109.571241][ T1334] ret_from_fork+0x51e/0xb90 [ 109.571275][ T1334] ? __pfx_ret_from_fork+0x10/0x10 [ 109.571301][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.571329][ T1334] ? __switch_to+0xc7d/0x1400 [ 109.571375][ T1334] ? __pfx_kthread+0x10/0x10 [ 109.571411][ T1334] ret_from_fork_asm+0x1a/0x30 [ 109.571471][ T1334] [ 109.571486][ T1334] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 110.316869][ T6122] loop5: detected capacity change from 0 to 64 [ 111.808864][ T6135] loop1: detected capacity change from 0 to 512 [ 111.844578][ T6135] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 111.979736][ T6135] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 112.510878][ T6143] loop3: detected capacity change from 0 to 512 [ 112.597223][ T5920] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 112.635573][ T6143] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 112.663969][ T6143] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 112.808838][ T6143] FAT-fs (loop3): FAT read failed (blocknr 128) [ 112.817405][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 112.897966][ T6149] fuse: Bad value for 'fd' [ 113.410445][ T6152] loop1: detected capacity change from 0 to 8 [ 113.820495][ T5920] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 114.079718][ T5920] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 114.089801][ T5920] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 114.099831][ T5920] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 114.109947][ T5920] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.123097][ T5920] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 114.229657][ T6152] SQUASHFS error: xz decompression failed, data probably corrupt [ 114.237490][ T6152] SQUASHFS error: Failed to read block 0x108: -5 [ 114.243901][ T6152] SQUASHFS error: Unable to read metadata cache entry [106] [ 114.252906][ T6152] SQUASHFS error: Unable to read inode 0x11f [ 114.253730][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.380995][ T6143] snd_dummy snd_dummy.0: control 2:0:8:syz0:0 is already present [ 114.664181][ T6155] netlink: 44 bytes leftover after parsing attributes in process `syz.5.54'. [ 114.683996][ T5920] usb 1-1: usb_control_msg returned -32 [ 114.690140][ T5920] usbtmc 1-1:16.0: can't read capabilities [ 115.232498][ T6166] ubi31: attaching mtd0 [ 115.260783][ T6166] ubi31: scanning is finished [ 115.901454][ T6166] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 116.065772][ T6172] 9p: Bad value for 'wfdno' [ 116.384046][ T6181] overlayfs: invalid redirect ((null)) [ 116.860703][ T5921] usb 1-1: USB disconnect, device number 2 [ 118.147856][ T6204] loop3: detected capacity change from 0 to 512 [ 118.160315][ T6176] loop5: detected capacity change from 0 to 32768 [ 118.171206][ T6176] ======================================================= [ 118.171206][ T6176] WARNING: The mand mount option has been deprecated and [ 118.171206][ T6176] and is ignored by this kernel. Remove the mand [ 118.171206][ T6176] option from the mount to silence this warning. [ 118.171206][ T6176] ======================================================= [ 118.248037][ T6204] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 118.269757][ T6204] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 118.334771][ T6204] snd_dummy snd_dummy.0: control 2:0:8:syz0:0 is already present [ 118.388298][ T6176] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 118.511180][ T6219] netlink: 28 bytes leftover after parsing attributes in process `syz.0.76'. [ 118.543957][ T6219] openvswitch: netlink: Flow key attr not present in new flow. [ 119.114506][ T6217] loop4: detected capacity change from 0 to 164 [ 119.182758][ T6176] XFS (loop5): Ending clean mount [ 119.208388][ T6217] rock: directory entry would overflow storage [ 119.222270][ T6217] rock: sig=0x4543, size=28, remaining=18 [ 119.360720][ T5822] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 119.424783][ T6187] loop1: detected capacity change from 0 to 32768 [ 119.532784][ T6187] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.68 (6187) [ 119.897003][ T6232] fuse: Bad value for 'fd' [ 120.117299][ T6238] loop3: detected capacity change from 0 to 64 [ 120.784569][ T6242] 9p: Bad value for 'rfdno' [ 121.869994][ T6228] loop0: detected capacity change from 0 to 32768 [ 121.903473][ T6228] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.79 (6228) [ 122.349482][ T6228] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 122.804083][ T6228] BTRFS info (device loop0): using blake2b checksum algorithm [ 122.979925][ T6228] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 122.980303][ T6228] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 123.124037][ T6228] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 123.138894][ T6264] loop1: detected capacity change from 0 to 164 [ 123.144606][ T6273] netlink: 28 bytes leftover after parsing attributes in process `syz.2.93'. [ 123.181900][ T6228] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 123.182217][ T6228] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 123.430493][ T6270] loop3: detected capacity change from 0 to 40427 [ 123.479851][ T6273] openvswitch: netlink: Flow key attr not present in new flow. [ 123.491882][ T6270] F2FS-fs (loop3): invalid crc value [ 123.503887][ T29] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 123.514176][ T6228] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 123.514486][ T6228] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 123.575799][ T6264] rock: directory entry would overflow storage [ 123.596891][ T6264] rock: sig=0x4543, size=28, remaining=18 [ 123.603894][ T6228] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 123.604559][ T6228] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 123.647668][ T6228] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 123.647988][ T6228] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 123.682760][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.714445][ T6270] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 123.728958][ T6270] F2FS-fs (loop3): Start checkpoint disabled! [ 123.748619][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 123.766033][ T29] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 123.771576][ T6228] BTRFS error (device loop0): open_ctree failed: -12 [ 123.776426][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.790441][ T29] usb 5-1: Product: syz [ 123.794768][ T6270] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 123.802422][ T29] usb 5-1: Manufacturer: syz [ 123.808143][ T6270] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 123.809155][ T6264] blktrace: Concurrent blktraces are not allowed on loop6 [ 123.827448][ T29] usb 5-1: SerialNumber: syz [ 123.844509][ T31] audit: type=1800 audit(1770851856.657:6): pid=6270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.91" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 124.358527][ T29] usb 5-1: config 0 descriptor?? [ 124.449316][ T6291] loop2: detected capacity change from 0 to 512 [ 124.648101][ T6291] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 124.944960][ T6291] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.456951][ T5971] kworker/u8:8: attempt to access beyond end of device [ 125.456951][ T5971] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 125.486216][ T6297] snd_dummy snd_dummy.0: control 2:0:8:syz0:0 is already present [ 125.842761][ T6291] FAT-fs (loop2): FAT read failed (blocknr 128) [ 125.853564][ T5971] CPU: 0 UID: 0 PID: 5971 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 125.853598][ T5971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 125.853615][ T5971] Workqueue: writeback wb_workfn (flush-7:3) [ 125.853655][ T5971] Call Trace: [ 125.853665][ T5971] [ 125.853674][ T5971] dump_stack_lvl+0xe8/0x150 [ 125.853711][ T5971] f2fs_handle_critical_error+0x37c/0x540 [ 125.853752][ T5971] f2fs_write_end_io+0xc1d/0xfd0 [ 125.853808][ T5971] __submit_merged_bio+0x256/0x650 [ 125.853847][ T5971] __submit_merged_write_cond+0x269/0x530 [ 125.853887][ T5971] f2fs_write_data_pages+0x2806/0x3360 [ 125.853960][ T5971] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 125.853994][ T5971] ? cfg80211_inform_single_bss_data+0x13b9/0x1ab0 [ 125.854040][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.854101][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.854130][ T5971] ? __lock_acquire+0x6b5/0x2cf0 [ 125.854185][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.854236][ T5971] ? __lock_acquire+0x6b5/0x2cf0 [ 125.854263][ T5971] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 125.854301][ T5971] do_writepages+0x32e/0x550 [ 125.854336][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.854364][ T5971] ? reacquire_held_locks+0x104/0x190 [ 125.854394][ T5971] ? writeback_sb_inodes+0x42a/0x1940 [ 125.854439][ T5971] __writeback_single_inode+0x133/0x1060 [ 125.854478][ T5971] ? do_raw_spin_unlock+0xf5/0x210 [ 125.854523][ T5971] writeback_sb_inodes+0x92e/0x1940 [ 125.854590][ T5971] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 125.854624][ T5971] ? do_raw_spin_lock+0x12b/0x2f0 [ 125.854703][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.854732][ T5971] ? rcu_is_watching+0x15/0xb0 [ 125.854761][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.854800][ T5971] wb_writeback+0x445/0xad0 [ 125.854841][ T5971] ? queue_io+0x2b1/0x450 [ 125.854886][ T5971] ? __pfx_wb_writeback+0x10/0x10 [ 125.854919][ T5971] ? do_raw_spin_lock+0x12b/0x2f0 [ 125.854973][ T5971] wb_workfn+0x3f8/0xef0 [ 125.855001][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.855029][ T5971] ? look_up_lock_class+0x57/0x110 [ 125.855087][ T5971] ? __pfx_wb_workfn+0x10/0x10 [ 125.855120][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.855180][ T5971] ? do_raw_spin_lock+0x12b/0x2f0 [ 125.855213][ T5971] ? lock_acquire+0x106/0x330 [ 125.855240][ T5971] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 125.855279][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.855311][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.855343][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.855379][ T5971] ? process_scheduled_works+0xa0f/0x17a0 [ 125.855406][ T5971] ? process_scheduled_works+0xa0f/0x17a0 [ 125.855435][ T5971] process_scheduled_works+0xaec/0x17a0 [ 125.855494][ T5971] ? __pfx_process_scheduled_works+0x10/0x10 [ 125.855524][ T5971] ? do_raw_spin_lock+0x12b/0x2f0 [ 125.855563][ T5971] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 125.855604][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.855640][ T5971] worker_thread+0xda6/0x1360 [ 125.855685][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.855714][ T5971] ? __kthread_parkme+0x19c/0x1f0 [ 125.855752][ T5971] kthread+0x388/0x470 [ 125.855787][ T5971] ? __pfx_worker_thread+0x10/0x10 [ 125.855813][ T5971] ? __pfx_kthread+0x10/0x10 [ 125.855849][ T5971] ret_from_fork+0x51e/0xb90 [ 125.855882][ T5971] ? __pfx_ret_from_fork+0x10/0x10 [ 125.855908][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.855937][ T5971] ? __switch_to+0xc7d/0x1400 [ 125.855982][ T5971] ? __pfx_kthread+0x10/0x10 [ 125.856018][ T5971] ret_from_fork_asm+0x1a/0x30 [ 125.856075][ T5971] [ 126.363643][ T5971] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 126.370880][ T5971] CPU: 0 UID: 0 PID: 5971 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 126.370912][ T5971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 126.370928][ T5971] Workqueue: writeback wb_workfn (flush-7:3) [ 126.370970][ T5971] Call Trace: [ 126.370980][ T5971] [ 126.370990][ T5971] dump_stack_lvl+0xe8/0x150 [ 126.371027][ T5971] f2fs_handle_critical_error+0x37c/0x540 [ 126.371071][ T5971] f2fs_write_end_io+0xc1d/0xfd0 [ 126.371131][ T5971] __submit_merged_bio+0x256/0x650 [ 126.371174][ T5971] __submit_merged_write_cond+0x269/0x530 [ 126.371216][ T5971] f2fs_write_data_pages+0x2806/0x3360 [ 126.371306][ T5971] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 126.371340][ T5971] ? cfg80211_inform_single_bss_data+0x13b9/0x1ab0 [ 126.371389][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.371458][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.371487][ T5971] ? __lock_acquire+0x6b5/0x2cf0 [ 126.371549][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.371603][ T5971] ? __lock_acquire+0x6b5/0x2cf0 [ 126.371632][ T5971] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 126.371670][ T5971] do_writepages+0x32e/0x550 [ 126.371706][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.371734][ T5971] ? reacquire_held_locks+0x104/0x190 [ 126.371763][ T5971] ? writeback_sb_inodes+0x42a/0x1940 [ 126.371808][ T5971] __writeback_single_inode+0x133/0x1060 [ 126.371847][ T5971] ? do_raw_spin_unlock+0xf5/0x210 [ 126.371889][ T5971] writeback_sb_inodes+0x92e/0x1940 [ 126.371961][ T5971] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 126.371995][ T5971] ? do_raw_spin_lock+0x12b/0x2f0 [ 126.372084][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.372113][ T5971] ? rcu_is_watching+0x15/0xb0 [ 126.372142][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.372182][ T5971] wb_writeback+0x445/0xad0 [ 126.372224][ T5971] ? queue_io+0x2b1/0x450 [ 126.372278][ T5971] ? __pfx_wb_writeback+0x10/0x10 [ 126.372311][ T5971] ? do_raw_spin_lock+0x12b/0x2f0 [ 126.372368][ T5971] wb_workfn+0x3f8/0xef0 [ 126.372396][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.372424][ T5971] ? look_up_lock_class+0x57/0x110 [ 126.372485][ T5971] ? __pfx_wb_workfn+0x10/0x10 [ 126.372520][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.372549][ T5971] ? do_raw_spin_lock+0x12b/0x2f0 [ 126.372582][ T5971] ? lock_acquire+0x106/0x330 [ 126.372609][ T5971] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 126.372649][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.372681][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.372717][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.372753][ T5971] ? process_scheduled_works+0xa0f/0x17a0 [ 126.372779][ T5971] ? process_scheduled_works+0xa0f/0x17a0 [ 126.372809][ T5971] process_scheduled_works+0xaec/0x17a0 [ 126.372876][ T5971] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.372901][ T5971] ? do_raw_spin_lock+0x12b/0x2f0 [ 126.372940][ T5971] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 126.372983][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.373019][ T5971] worker_thread+0xda6/0x1360 [ 126.373067][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.373096][ T5971] ? __kthread_parkme+0x19c/0x1f0 [ 126.373142][ T5971] kthread+0x388/0x470 [ 126.373178][ T5971] ? __pfx_worker_thread+0x10/0x10 [ 126.373203][ T5971] ? __pfx_kthread+0x10/0x10 [ 126.373240][ T5971] ret_from_fork+0x51e/0xb90 [ 126.373283][ T5971] ? __pfx_ret_from_fork+0x10/0x10 [ 126.373310][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.373338][ T5971] ? __switch_to+0xc7d/0x1400 [ 126.373385][ T5971] ? __pfx_kthread+0x10/0x10 [ 126.373422][ T5971] ret_from_fork_asm+0x1a/0x30 [ 126.373483][ T5971] [ 126.373587][ T5971] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 127.597323][ T6307] netlink: 20 bytes leftover after parsing attributes in process `syz.2.99'. [ 127.606795][ T6308] netlink: 284 bytes leftover after parsing attributes in process `syz.5.100'. [ 127.632021][ T6307] Zero length message leads to an empty skb [ 127.668785][ T6311] netlink: 284 bytes leftover after parsing attributes in process `syz.5.100'. [ 127.697348][ T6310] overlayfs: missing 'lowerdir' [ 127.918577][ T6306] loop1: detected capacity change from 0 to 40427 [ 127.938765][ T6306] F2FS-fs (loop1): invalid crc value [ 128.027310][ T6315] fuse: Bad value for 'fd' [ 128.313331][ T6306] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 129.014231][ T6306] F2FS-fs (loop1): Start checkpoint disabled! [ 129.021830][ T6319] loop2: detected capacity change from 0 to 164 [ 129.143530][ T6321] loop0: detected capacity change from 0 to 8 [ 129.238708][ T6321] SQUASHFS error: xz decompression failed, data probably corrupt [ 129.246554][ T6321] SQUASHFS error: Failed to read block 0x108: -5 [ 129.252932][ T6321] SQUASHFS error: Unable to read metadata cache entry [106] [ 129.260540][ T6321] SQUASHFS error: Unable to read inode 0x11f [ 129.287092][ T6319] rock: directory entry would overflow storage [ 129.303785][ T6306] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 129.311760][ T6306] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 129.331288][ T6319] rock: sig=0x4543, size=28, remaining=18 [ 129.402205][ T31] audit: type=1800 audit(1770851862.197:7): pid=6306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.97" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 129.885508][ T6319] blktrace: Concurrent blktraces are not allowed on loop6 [ 130.515680][ T6333] ubi31: attaching mtd0 [ 130.521914][ T6333] ubi31: scanning is finished [ 130.924472][ T6330] loop0: detected capacity change from 0 to 32768 [ 130.995435][ T6330] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 131.047011][ T6333] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 131.054691][ T6333] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 131.062031][ T6333] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 131.069345][ T6333] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 131.077947][ T6333] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 131.088695][ T6333] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 131.097303][ T6333] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2416522693 [ 131.109526][ T6333] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 131.225954][ T6343] ubi31: background thread "ubi_bgt31d" started, PID 6343 [ 131.312616][ T6330] XFS (loop0): Ending clean mount [ 131.520961][ T1334] kworker/u8:6: attempt to access beyond end of device [ 131.520961][ T1334] loop1: rw=1, sector=77824, nr_sectors = 408 limit=40427 [ 131.642836][ T1334] kworker/u8:6: attempt to access beyond end of device [ 131.642836][ T1334] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 131.646229][ T6350] loop2: detected capacity change from 0 to 64 [ 131.737705][ T1334] CPU: 1 UID: 0 PID: 1334 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 131.737739][ T1334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 131.737755][ T1334] Workqueue: writeback wb_workfn (flush-7:1) [ 131.737797][ T1334] Call Trace: [ 131.737807][ T1334] [ 131.737817][ T1334] dump_stack_lvl+0xe8/0x150 [ 131.737855][ T1334] f2fs_handle_critical_error+0x37c/0x540 [ 131.737899][ T1334] f2fs_write_end_io+0xc1d/0xfd0 [ 131.737959][ T1334] __submit_merged_bio+0x256/0x650 [ 131.738003][ T1334] __submit_merged_write_cond+0x269/0x530 [ 131.738045][ T1334] f2fs_write_data_pages+0x2806/0x3360 [ 131.738127][ T1334] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 131.738183][ T1334] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 131.738270][ T1334] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 131.738328][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.738358][ T1334] ? __lock_acquire+0x6b5/0x2cf0 [ 131.738406][ T1334] ? f2fs_write_inode+0x3fb/0x5f0 [ 131.738439][ T1334] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 131.738474][ T1334] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 131.738517][ T1334] do_writepages+0x32e/0x550 [ 131.738554][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.738583][ T1334] ? reacquire_held_locks+0x104/0x190 [ 131.738614][ T1334] ? writeback_sb_inodes+0x42a/0x1940 [ 131.738660][ T1334] __writeback_single_inode+0x133/0x1060 [ 131.738701][ T1334] ? do_raw_spin_unlock+0xf5/0x210 [ 131.738743][ T1334] writeback_sb_inodes+0x92e/0x1940 [ 131.738789][ T1334] ? unwind_next_frame+0xa5/0x23c0 [ 131.738848][ T1334] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 131.738883][ T1334] ? do_raw_spin_lock+0x12b/0x2f0 [ 131.738973][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.739002][ T1334] ? rcu_is_watching+0x15/0xb0 [ 131.739031][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.739072][ T1334] wb_writeback+0x445/0xad0 [ 131.739116][ T1334] ? queue_io+0x2b1/0x450 [ 131.739163][ T1334] ? __pfx_wb_writeback+0x10/0x10 [ 131.739196][ T1334] ? do_raw_spin_lock+0x12b/0x2f0 [ 131.739255][ T1334] wb_workfn+0x3f8/0xef0 [ 131.739283][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.739312][ T1334] ? look_up_lock_class+0x57/0x110 [ 131.739374][ T1334] ? __pfx_wb_workfn+0x10/0x10 [ 131.739403][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.739437][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.739466][ T1334] ? do_raw_spin_lock+0x12b/0x2f0 [ 131.739504][ T1334] ? lock_acquire+0x106/0x330 [ 131.739533][ T1334] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 131.739573][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.739607][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.739640][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.739677][ T1334] ? process_scheduled_works+0xa0f/0x17a0 [ 131.739704][ T1334] ? process_scheduled_works+0xa0f/0x17a0 [ 131.739734][ T1334] process_scheduled_works+0xaec/0x17a0 [ 131.739802][ T1334] ? __pfx_process_scheduled_works+0x10/0x10 [ 131.739826][ T1334] ? do_raw_spin_lock+0x12b/0x2f0 [ 131.739866][ T1334] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 131.739910][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.739947][ T1334] worker_thread+0xda6/0x1360 [ 131.739998][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.740026][ T1334] ? __kthread_parkme+0x19c/0x1f0 [ 131.740066][ T1334] kthread+0x388/0x470 [ 131.740102][ T1334] ? __pfx_worker_thread+0x10/0x10 [ 131.740127][ T1334] ? __pfx_kthread+0x10/0x10 [ 131.740164][ T1334] ret_from_fork+0x51e/0xb90 [ 131.740199][ T1334] ? __pfx_ret_from_fork+0x10/0x10 [ 131.740225][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.740254][ T1334] ? __switch_to+0xc7d/0x1400 [ 131.740301][ T1334] ? __pfx_kthread+0x10/0x10 [ 131.740338][ T1334] ret_from_fork_asm+0x1a/0x30 [ 131.740399][ T1334] [ 131.740410][ T1334] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 132.176559][ T1334] CPU: 1 UID: 0 PID: 1334 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 132.176595][ T1334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 132.176612][ T1334] Workqueue: writeback wb_workfn (flush-7:1) [ 132.176655][ T1334] Call Trace: [ 132.176665][ T1334] [ 132.176675][ T1334] dump_stack_lvl+0xe8/0x150 [ 132.176715][ T1334] f2fs_handle_critical_error+0x37c/0x540 [ 132.176759][ T1334] f2fs_write_end_io+0xc1d/0xfd0 [ 132.176819][ T1334] __submit_merged_bio+0x256/0x650 [ 132.176862][ T1334] __submit_merged_write_cond+0x269/0x530 [ 132.176905][ T1334] f2fs_write_data_pages+0x2806/0x3360 [ 132.176987][ T1334] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 132.177043][ T1334] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 132.177130][ T1334] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 132.177190][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.177220][ T1334] ? __lock_acquire+0x6b5/0x2cf0 [ 132.177268][ T1334] ? f2fs_write_inode+0x3fb/0x5f0 [ 132.177301][ T1334] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 132.177336][ T1334] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 132.177376][ T1334] do_writepages+0x32e/0x550 [ 132.177414][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.177444][ T1334] ? reacquire_held_locks+0x104/0x190 [ 132.177475][ T1334] ? writeback_sb_inodes+0x42a/0x1940 [ 132.177530][ T1334] __writeback_single_inode+0x133/0x1060 [ 132.177572][ T1334] ? do_raw_spin_unlock+0xf5/0x210 [ 132.177615][ T1334] writeback_sb_inodes+0x92e/0x1940 [ 132.177661][ T1334] ? unwind_next_frame+0xa5/0x23c0 [ 132.177720][ T1334] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 132.177755][ T1334] ? do_raw_spin_lock+0x12b/0x2f0 [ 132.177846][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.177877][ T1334] ? rcu_is_watching+0x15/0xb0 [ 132.177907][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.177948][ T1334] wb_writeback+0x445/0xad0 [ 132.177993][ T1334] ? queue_io+0x2b1/0x450 [ 132.178042][ T1334] ? __pfx_wb_writeback+0x10/0x10 [ 132.178076][ T1334] ? do_raw_spin_lock+0x12b/0x2f0 [ 132.178136][ T1334] wb_workfn+0x3f8/0xef0 [ 132.178164][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.178193][ T1334] ? look_up_lock_class+0x57/0x110 [ 132.178257][ T1334] ? __pfx_wb_workfn+0x10/0x10 [ 132.178285][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.178320][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.178348][ T1334] ? do_raw_spin_lock+0x12b/0x2f0 [ 132.178382][ T1334] ? lock_acquire+0x106/0x330 [ 132.178411][ T1334] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 132.178453][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.178487][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.178527][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.178562][ T1334] ? process_scheduled_works+0xa0f/0x17a0 [ 132.178589][ T1334] ? process_scheduled_works+0xa0f/0x17a0 [ 132.178620][ T1334] process_scheduled_works+0xaec/0x17a0 [ 132.178688][ T1334] ? __pfx_process_scheduled_works+0x10/0x10 [ 132.178713][ T1334] ? do_raw_spin_lock+0x12b/0x2f0 [ 132.178753][ T1334] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 132.178797][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.178834][ T1334] worker_thread+0xda6/0x1360 [ 132.178885][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.178914][ T1334] ? __kthread_parkme+0x19c/0x1f0 [ 132.178955][ T1334] kthread+0x388/0x470 [ 132.178990][ T1334] ? __pfx_worker_thread+0x10/0x10 [ 132.179016][ T1334] ? __pfx_kthread+0x10/0x10 [ 132.179053][ T1334] ret_from_fork+0x51e/0xb90 [ 132.179087][ T1334] ? __pfx_ret_from_fork+0x10/0x10 [ 132.179114][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.179143][ T1334] ? __switch_to+0xc7d/0x1400 [ 132.179190][ T1334] ? __pfx_kthread+0x10/0x10 [ 132.179227][ T1334] ret_from_fork_asm+0x1a/0x30 [ 132.179287][ T1334] [ 132.179298][ T1334] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 132.406371][ T5900] usb 5-1: USB disconnect, device number 3 [ 132.732695][ T6351] Invalid ELF header magic: != ELF [ 133.241700][ T6358] loop2: detected capacity change from 0 to 64 [ 133.392684][ T6360] loop4: detected capacity change from 0 to 512 [ 133.469874][ T6360] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 133.690478][ T6360] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 133.948520][ T6348] loop5: detected capacity change from 0 to 32768 [ 134.333054][ T5818] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 134.377813][ T6348] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.108 (6348) [ 134.559102][ T6364] loop3: detected capacity change from 0 to 512 [ 134.615796][ T6360] FAT-fs (loop4): FAT read failed (blocknr 128) [ 134.696041][ T6364] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 134.699048][ T6368] netlink: 68 bytes leftover after parsing attributes in process `syz.0.113'. [ 134.776387][ T6364] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 134.882608][ T6371] snd_dummy snd_dummy.0: control 2:0:8:syz0:0 is already present [ 134.909286][ T6372] fuse: Bad value for 'fd' [ 134.973260][ T6364] FAT-fs (loop3): FAT read failed (blocknr 128) [ 135.219707][ T6377] loop4: detected capacity change from 0 to 256 [ 135.260669][ T6379] overlayfs: missing 'lowerdir' [ 136.078364][ T6387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.116'. [ 136.113428][ T6386] fuse: Invalid rootmode [ 136.172137][ T6386] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 136.187632][ T6386] overlayfs: missing 'lowerdir' [ 136.313986][ T6394] fuse: Bad value for 'fd' [ 136.495312][ T6391] loop0: detected capacity change from 0 to 40427 [ 136.554011][ T6391] F2FS-fs (loop0): invalid crc value [ 136.822517][ T6391] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 136.841987][ T6391] F2FS-fs (loop0): Start checkpoint disabled! [ 136.851375][ T6391] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 136.869411][ T6391] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 136.943669][ T31] audit: type=1800 audit(1770851869.747:8): pid=6391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.120" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 137.389714][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.403702][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.865043][ T1334] kworker/u8:6: attempt to access beyond end of device [ 137.865043][ T1334] loop0: rw=1, sector=77824, nr_sectors = 408 limit=40427 [ 137.879561][ T6408] fuse: Bad value for 'fd' [ 137.929866][ T1334] kworker/u8:6: attempt to access beyond end of device [ 137.929866][ T1334] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 137.969460][ T1334] CPU: 0 UID: 0 PID: 1334 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 137.969496][ T1334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 137.969513][ T1334] Workqueue: writeback wb_workfn (flush-7:0) [ 137.969556][ T1334] Call Trace: [ 137.969565][ T1334] [ 137.969576][ T1334] dump_stack_lvl+0xe8/0x150 [ 137.969615][ T1334] f2fs_handle_critical_error+0x37c/0x540 [ 137.969660][ T1334] f2fs_write_end_io+0xc1d/0xfd0 [ 137.969721][ T1334] __submit_merged_bio+0x256/0x650 [ 137.969764][ T1334] __submit_merged_write_cond+0x269/0x530 [ 137.969807][ T1334] f2fs_write_data_pages+0x2806/0x3360 [ 137.969890][ T1334] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 137.969947][ T1334] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 137.970036][ T1334] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 137.970096][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.970126][ T1334] ? __lock_acquire+0x6b5/0x2cf0 [ 137.970174][ T1334] ? f2fs_write_inode+0x3fb/0x5f0 [ 137.970207][ T1334] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 137.970248][ T1334] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 137.970287][ T1334] do_writepages+0x32e/0x550 [ 137.970324][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.970353][ T1334] ? reacquire_held_locks+0x104/0x190 [ 137.970385][ T1334] ? writeback_sb_inodes+0x42a/0x1940 [ 137.970432][ T1334] __writeback_single_inode+0x133/0x1060 [ 137.970473][ T1334] ? do_raw_spin_unlock+0xf5/0x210 [ 137.970516][ T1334] writeback_sb_inodes+0x92e/0x1940 [ 137.970562][ T1334] ? unwind_next_frame+0xa5/0x23c0 [ 137.970623][ T1334] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 137.970658][ T1334] ? do_raw_spin_lock+0x12b/0x2f0 [ 137.970749][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.970779][ T1334] ? rcu_is_watching+0x15/0xb0 [ 137.970809][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.970850][ T1334] wb_writeback+0x445/0xad0 [ 137.970894][ T1334] ? queue_io+0x2b1/0x450 [ 137.970942][ T1334] ? __pfx_wb_writeback+0x10/0x10 [ 137.970976][ T1334] ? do_raw_spin_lock+0x12b/0x2f0 [ 137.971036][ T1334] wb_workfn+0x3f8/0xef0 [ 137.971064][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.971093][ T1334] ? look_up_lock_class+0x57/0x110 [ 137.971157][ T1334] ? __pfx_wb_workfn+0x10/0x10 [ 137.971186][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.971221][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.971256][ T1334] ? do_raw_spin_lock+0x12b/0x2f0 [ 137.971290][ T1334] ? lock_acquire+0x106/0x330 [ 137.971319][ T1334] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 137.971360][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.971394][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.971427][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.971465][ T1334] ? process_scheduled_works+0xa0f/0x17a0 [ 137.971491][ T1334] ? process_scheduled_works+0xa0f/0x17a0 [ 137.971521][ T1334] process_scheduled_works+0xaec/0x17a0 [ 137.971597][ T1334] ? __pfx_process_scheduled_works+0x10/0x10 [ 137.971623][ T1334] ? do_raw_spin_lock+0x12b/0x2f0 [ 137.971663][ T1334] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 137.971707][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.971744][ T1334] worker_thread+0xda6/0x1360 [ 137.971796][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.971826][ T1334] ? __kthread_parkme+0x19c/0x1f0 [ 137.971866][ T1334] kthread+0x388/0x470 [ 137.971902][ T1334] ? __pfx_worker_thread+0x10/0x10 [ 137.971928][ T1334] ? __pfx_kthread+0x10/0x10 [ 137.971966][ T1334] ret_from_fork+0x51e/0xb90 [ 137.972001][ T1334] ? __pfx_ret_from_fork+0x10/0x10 [ 137.972027][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.972057][ T1334] ? __switch_to+0xc7d/0x1400 [ 137.972104][ T1334] ? __pfx_kthread+0x10/0x10 [ 137.972142][ T1334] ret_from_fork_asm+0x1a/0x30 [ 137.972204][ T1334] [ 137.972215][ T1334] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 138.382047][ T1334] CPU: 0 UID: 0 PID: 1334 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 138.382081][ T1334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 138.382097][ T1334] Workqueue: writeback wb_workfn (flush-7:0) [ 138.382139][ T1334] Call Trace: [ 138.382149][ T1334] [ 138.382159][ T1334] dump_stack_lvl+0xe8/0x150 [ 138.382197][ T1334] f2fs_handle_critical_error+0x37c/0x540 [ 138.382240][ T1334] f2fs_write_end_io+0xc1d/0xfd0 [ 138.382301][ T1334] __submit_merged_bio+0x256/0x650 [ 138.382344][ T1334] __submit_merged_write_cond+0x269/0x530 [ 138.382387][ T1334] f2fs_write_data_pages+0x2806/0x3360 [ 138.382468][ T1334] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 138.382524][ T1334] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 138.382618][ T1334] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 138.382675][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.382718][ T1334] ? __lock_acquire+0x6b5/0x2cf0 [ 138.382766][ T1334] ? f2fs_write_inode+0x3fb/0x5f0 [ 138.382799][ T1334] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 138.382834][ T1334] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 138.382873][ T1334] do_writepages+0x32e/0x550 [ 138.382910][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.382939][ T1334] ? reacquire_held_locks+0x104/0x190 [ 138.382969][ T1334] ? writeback_sb_inodes+0x42a/0x1940 [ 138.383015][ T1334] __writeback_single_inode+0x133/0x1060 [ 138.383056][ T1334] ? do_raw_spin_unlock+0xf5/0x210 [ 138.383099][ T1334] writeback_sb_inodes+0x92e/0x1940 [ 138.383145][ T1334] ? unwind_next_frame+0xa5/0x23c0 [ 138.383205][ T1334] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 138.383240][ T1334] ? do_raw_spin_lock+0x12b/0x2f0 [ 138.383331][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.383360][ T1334] ? rcu_is_watching+0x15/0xb0 [ 138.383390][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.383431][ T1334] wb_writeback+0x445/0xad0 [ 138.383475][ T1334] ? queue_io+0x2b1/0x450 [ 138.383523][ T1334] ? __pfx_wb_writeback+0x10/0x10 [ 138.383557][ T1334] ? do_raw_spin_lock+0x12b/0x2f0 [ 138.383627][ T1334] wb_workfn+0x3f8/0xef0 [ 138.383656][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.383685][ T1334] ? look_up_lock_class+0x57/0x110 [ 138.383748][ T1334] ? __pfx_wb_workfn+0x10/0x10 [ 138.383777][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.383813][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.383842][ T1334] ? do_raw_spin_lock+0x12b/0x2f0 [ 138.383875][ T1334] ? lock_acquire+0x106/0x330 [ 138.383904][ T1334] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 138.383945][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.383978][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.384012][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.384049][ T1334] ? process_scheduled_works+0xa0f/0x17a0 [ 138.384076][ T1334] ? process_scheduled_works+0xa0f/0x17a0 [ 138.384107][ T1334] process_scheduled_works+0xaec/0x17a0 [ 138.384176][ T1334] ? __pfx_process_scheduled_works+0x10/0x10 [ 138.384202][ T1334] ? do_raw_spin_lock+0x12b/0x2f0 [ 138.384243][ T1334] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 138.384286][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.384323][ T1334] worker_thread+0xda6/0x1360 [ 138.384373][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.384401][ T1334] ? __kthread_parkme+0x19c/0x1f0 [ 138.384440][ T1334] kthread+0x388/0x470 [ 138.384476][ T1334] ? __pfx_worker_thread+0x10/0x10 [ 138.384501][ T1334] ? __pfx_kthread+0x10/0x10 [ 138.384539][ T1334] ret_from_fork+0x51e/0xb90 [ 138.384579][ T1334] ? __pfx_ret_from_fork+0x10/0x10 [ 138.384604][ T1334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.384633][ T1334] ? __switch_to+0xc7d/0x1400 [ 138.384681][ T1334] ? __pfx_kthread+0x10/0x10 [ 138.384718][ T1334] ret_from_fork_asm+0x1a/0x30 [ 138.384780][ T1334] [ 138.385050][ T1334] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 138.515795][ T6418] loop3: detected capacity change from 0 to 8 [ 138.672869][ T6418] SQUASHFS error: xz decompression failed, data probably corrupt [ 138.673062][ T6418] SQUASHFS error: Failed to read block 0x108: -5 [ 138.673109][ T6418] SQUASHFS error: Unable to read metadata cache entry [106] [ 138.673149][ T6418] SQUASHFS error: Unable to read inode 0x11f [ 140.796439][ T6433] netlink: 68 bytes leftover after parsing attributes in process `syz.4.133'. [ 141.214271][ T6441] openvswitch: netlink: Flow actions attr not present in new flow. [ 141.515892][ T6444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.843927][ T5921] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 142.047815][ T6447] overlayfs: missing 'lowerdir' [ 142.281981][ T6448] loop1: detected capacity change from 0 to 40427 [ 142.444051][ T6448] F2FS-fs (loop1): invalid crc value [ 142.444321][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 143.118509][ T5921] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 143.118578][ T5921] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 143.118606][ T5921] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 143.118636][ T5921] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 143.118666][ T5921] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.118714][ T5921] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 143.118742][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.201904][ T6448] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 143.205110][ T6448] F2FS-fs (loop1): Start checkpoint disabled! [ 143.207535][ T6448] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 143.209754][ T6448] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 143.318526][ T6460] netlink: 20 bytes leftover after parsing attributes in process `syz.3.143'. [ 143.320546][ T6460] netlink: 20 bytes leftover after parsing attributes in process `syz.3.143'. [ 143.983875][ T5921] usb 5-1: usb_control_msg returned -32 [ 143.983940][ T5921] usbtmc 5-1:16.0: can't read capabilities [ 144.108223][ T37] kworker/u8:2: attempt to access beyond end of device [ 144.108223][ T37] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 144.108317][ T37] CPU: 0 UID: 0 PID: 37 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 144.108346][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 144.108362][ T37] Workqueue: writeback wb_workfn (flush-7:1) [ 144.108402][ T37] Call Trace: [ 144.108411][ T37] [ 144.108421][ T37] dump_stack_lvl+0xe8/0x150 [ 144.108458][ T37] f2fs_handle_critical_error+0x37c/0x540 [ 144.108501][ T37] f2fs_write_end_io+0xc1d/0xfd0 [ 144.108557][ T37] __submit_merged_bio+0x256/0x650 [ 144.108598][ T37] __submit_merged_write_cond+0x269/0x530 [ 144.108638][ T37] f2fs_write_data_pages+0x2806/0x3360 [ 144.108710][ T37] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 144.108763][ T37] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 144.108841][ T37] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 144.108895][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.108925][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 144.108972][ T37] ? f2fs_write_inode+0x3fb/0x5f0 [ 144.109003][ T37] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 144.109037][ T37] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 144.109075][ T37] do_writepages+0x32e/0x550 [ 144.109108][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.109143][ T37] ? reacquire_held_locks+0x104/0x190 [ 144.109173][ T37] ? writeback_sb_inodes+0x42a/0x1940 [ 144.109218][ T37] __writeback_single_inode+0x133/0x1060 [ 144.109266][ T37] ? do_raw_spin_unlock+0xf5/0x210 [ 144.109307][ T37] writeback_sb_inodes+0x92e/0x1940 [ 144.109363][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.109400][ T37] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 144.109434][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 144.109514][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.109543][ T37] ? rcu_is_watching+0x15/0xb0 [ 144.109572][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.109610][ T37] wb_writeback+0x445/0xad0 [ 144.109651][ T37] ? queue_io+0x2b1/0x450 [ 144.109695][ T37] ? __pfx_wb_writeback+0x10/0x10 [ 144.109729][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 144.109784][ T37] wb_workfn+0x3f8/0xef0 [ 144.109811][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.109840][ T37] ? look_up_lock_class+0x57/0x110 [ 144.109898][ T37] ? __pfx_wb_workfn+0x10/0x10 [ 144.109925][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.109959][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.109989][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 144.110022][ T37] ? lock_acquire+0x106/0x330 [ 144.110049][ T37] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 144.110088][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.110120][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.110154][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.110189][ T37] ? process_scheduled_works+0xa0f/0x17a0 [ 144.110216][ T37] ? process_scheduled_works+0xa0f/0x17a0 [ 144.110244][ T37] process_scheduled_works+0xaec/0x17a0 [ 144.110315][ T37] ? __pfx_process_scheduled_works+0x10/0x10 [ 144.110339][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 144.110378][ T37] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 144.110420][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.110456][ T37] worker_thread+0xda6/0x1360 [ 144.110502][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.110531][ T37] ? __kthread_parkme+0x19c/0x1f0 [ 144.110569][ T37] kthread+0x388/0x470 [ 144.110605][ T37] ? __pfx_worker_thread+0x10/0x10 [ 144.110629][ T37] ? __pfx_kthread+0x10/0x10 [ 144.110665][ T37] ret_from_fork+0x51e/0xb90 [ 144.110699][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 144.110724][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.110753][ T37] ? __switch_to+0xc7d/0x1400 [ 144.110799][ T37] ? __pfx_kthread+0x10/0x10 [ 144.110835][ T37] ret_from_fork_asm+0x1a/0x30 [ 144.110892][ T37] [ 144.122512][ T37] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 144.174522][ T6467] loop3: detected capacity change from 0 to 512 [ 144.216571][ T6467] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 144.216856][ T6467] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.304541][ T6469] netlink: 68 bytes leftover after parsing attributes in process `syz.5.147'. [ 144.319888][ T6467] FAT-fs (loop3): FAT read failed (blocknr 128) [ 144.371951][ T6467] snd_dummy snd_dummy.0: control 2:0:8:syz0:0 is already present [ 144.780724][ T6476] loop1: detected capacity change from 0 to 512 [ 144.781672][ T6476] EXT4-fs: Ignoring removed oldalloc option [ 144.804317][ T6476] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 145.709942][ T6483] process 'syz.3.151' launched '/dev/fd/9' with NULL argv: empty string added [ 145.718362][ T5900] usb 5-1: USB disconnect, device number 4 [ 145.876558][ T6486] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.485979][ T6496] ubi: mtd0 is already attached to ubi31 [ 147.450516][ T6497] loop2: detected capacity change from 0 to 164 [ 147.465413][ T6500] ubi: mtd0 is already attached to ubi31 [ 147.493514][ T6497] rock: directory entry would overflow storage [ 147.556273][ T6497] rock: sig=0x4543, size=28, remaining=18 [ 147.639513][ T6497] blktrace: Concurrent blktraces are not allowed on loop6 [ 148.206714][ T6507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.718016][ T6509] fuse: Bad value for 'fd' [ 148.794155][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 148.994725][ T6512] netlink: 68 bytes leftover after parsing attributes in process `syz.1.161'. [ 149.107320][ T6514] loop2: detected capacity change from 0 to 8 [ 149.250195][ T6514] SQUASHFS error: xz decompression failed, data probably corrupt [ 149.258352][ T6514] SQUASHFS error: Failed to read block 0x108: -5 [ 149.265064][ T6514] SQUASHFS error: Unable to read metadata cache entry [106] [ 149.273220][ T6514] SQUASHFS error: Unable to read inode 0x11f [ 149.693809][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 149.735100][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 149.854059][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 149.913647][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 149.965869][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 150.003100][ T6518] loop2: detected capacity change from 0 to 256 [ 150.006552][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.240388][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 150.606289][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.413711][ T10] usb 5-1: usb_control_msg returned -71 [ 151.443791][ T10] usbtmc 5-1:16.0: can't read capabilities [ 151.510506][ T10] usb 5-1: USB disconnect, device number 5 [ 151.594057][ T6529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.919572][ T6533] loop1: detected capacity change from 0 to 256 [ 151.951896][ T6536] fuse: Bad value for 'fd' [ 152.522372][ T6543] loop4: detected capacity change from 0 to 8 [ 152.674041][ T6543] SQUASHFS error: xz decompression failed, data probably corrupt [ 152.681881][ T6543] SQUASHFS error: Failed to read block 0x108: -5 [ 152.688325][ T6543] SQUASHFS error: Unable to read metadata cache entry [106] [ 152.695678][ T6543] SQUASHFS error: Unable to read inode 0x11f [ 153.107727][ T6547] fuse: Bad value for 'fd' [ 153.451441][ T6553] loop0: detected capacity change from 0 to 8 [ 154.062068][ T6553] SQUASHFS error: xz decompression failed, data probably corrupt [ 154.069978][ T6553] SQUASHFS error: Failed to read block 0x108: -5 [ 154.076360][ T6553] SQUASHFS error: Unable to read metadata cache entry [106] [ 154.084998][ T6553] SQUASHFS error: Unable to read inode 0x11f [ 154.975818][ T6563] loop3: detected capacity change from 0 to 512 [ 155.058090][ T6563] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 155.106622][ T6563] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.161449][ T6578] loop3: detected capacity change from 0 to 40427 [ 156.195447][ T6578] F2FS-fs (loop3): invalid crc value [ 156.204273][ T6577] loop2: detected capacity change from 0 to 256 [ 156.292360][ T6578] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 156.310907][ T6578] F2FS-fs (loop3): Start checkpoint disabled! [ 156.375257][ T6578] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 156.383106][ T6578] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 156.533276][ T31] audit: type=1800 audit(1770851889.337:9): pid=6578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.184" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 156.540934][ T6582] netlink: 276 bytes leftover after parsing attributes in process `syz.5.186'. [ 157.172598][ T6582] netlink: 276 bytes leftover after parsing attributes in process `syz.5.186'. [ 157.274143][ T6587] netlink: 68 bytes leftover after parsing attributes in process `syz.2.187'. [ 157.415700][ T5983] kworker/u8:9: attempt to access beyond end of device [ 157.415700][ T5983] loop3: rw=1, sector=77824, nr_sectors = 408 limit=40427 [ 157.480049][ T5983] kworker/u8:9: attempt to access beyond end of device [ 157.480049][ T5983] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 157.537123][ T5983] CPU: 1 UID: 0 PID: 5983 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 157.537157][ T5983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 157.537174][ T5983] Workqueue: writeback wb_workfn (flush-7:3) [ 157.537215][ T5983] Call Trace: [ 157.537225][ T5983] [ 157.537235][ T5983] dump_stack_lvl+0xe8/0x150 [ 157.537273][ T5983] f2fs_handle_critical_error+0x37c/0x540 [ 157.537319][ T5983] f2fs_write_end_io+0xc1d/0xfd0 [ 157.537380][ T5983] __submit_merged_bio+0x256/0x650 [ 157.537423][ T5983] __submit_merged_write_cond+0x269/0x530 [ 157.537466][ T5983] f2fs_write_data_pages+0x2806/0x3360 [ 157.537553][ T5983] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 157.537610][ T5983] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 157.537698][ T5983] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 157.537758][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.537788][ T5983] ? __lock_acquire+0x6b5/0x2cf0 [ 157.537837][ T5983] ? f2fs_write_inode+0x3fb/0x5f0 [ 157.537869][ T5983] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 157.537904][ T5983] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 157.537943][ T5983] do_writepages+0x32e/0x550 [ 157.537981][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.538010][ T5983] ? reacquire_held_locks+0x104/0x190 [ 157.538041][ T5983] ? writeback_sb_inodes+0x42a/0x1940 [ 157.538088][ T5983] __writeback_single_inode+0x133/0x1060 [ 157.538129][ T5983] ? do_raw_spin_unlock+0xf5/0x210 [ 157.538172][ T5983] writeback_sb_inodes+0x92e/0x1940 [ 157.538219][ T5983] ? unwind_next_frame+0xa5/0x23c0 [ 157.538278][ T5983] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 157.538313][ T5983] ? do_raw_spin_lock+0x12b/0x2f0 [ 157.538404][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.538434][ T5983] ? rcu_is_watching+0x15/0xb0 [ 157.538463][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.538504][ T5983] wb_writeback+0x445/0xad0 [ 157.538552][ T5983] ? queue_io+0x2b1/0x450 [ 157.538600][ T5983] ? __pfx_wb_writeback+0x10/0x10 [ 157.538634][ T5983] ? do_raw_spin_lock+0x12b/0x2f0 [ 157.538693][ T5983] wb_workfn+0x3f8/0xef0 [ 157.538722][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.538751][ T5983] ? look_up_lock_class+0x57/0x110 [ 157.538814][ T5983] ? __pfx_wb_workfn+0x10/0x10 [ 157.538843][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.538878][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.538907][ T5983] ? do_raw_spin_lock+0x12b/0x2f0 [ 157.538941][ T5983] ? lock_acquire+0x106/0x330 [ 157.538969][ T5983] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 157.539010][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.539044][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.539078][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.539115][ T5983] ? process_scheduled_works+0xa0f/0x17a0 [ 157.539142][ T5983] ? process_scheduled_works+0xa0f/0x17a0 [ 157.539172][ T5983] process_scheduled_works+0xaec/0x17a0 [ 157.539241][ T5983] ? __pfx_process_scheduled_works+0x10/0x10 [ 157.539266][ T5983] ? do_raw_spin_lock+0x12b/0x2f0 [ 157.539306][ T5983] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 157.539350][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.539387][ T5983] worker_thread+0xda6/0x1360 [ 157.539439][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.539467][ T5983] ? __kthread_parkme+0x19c/0x1f0 [ 157.539513][ T5983] kthread+0x388/0x470 [ 157.539547][ T5983] ? __pfx_worker_thread+0x10/0x10 [ 157.539573][ T5983] ? __pfx_kthread+0x10/0x10 [ 157.539609][ T5983] ret_from_fork+0x51e/0xb90 [ 157.539644][ T5983] ? __pfx_ret_from_fork+0x10/0x10 [ 157.539671][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.539700][ T5983] ? __switch_to+0xc7d/0x1400 [ 157.539748][ T5983] ? __pfx_kthread+0x10/0x10 [ 157.539785][ T5983] ret_from_fork_asm+0x1a/0x30 [ 157.539848][ T5983] [ 157.539859][ T5983] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 157.686917][ T6569] loop0: detected capacity change from 0 to 32768 [ 157.726344][ T5983] CPU: 1 UID: 0 PID: 5983 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 157.726376][ T5983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 157.726392][ T5983] Workqueue: writeback wb_workfn (flush-7:3) [ 157.726433][ T5983] Call Trace: [ 157.726443][ T5983] [ 157.726453][ T5983] dump_stack_lvl+0xe8/0x150 [ 157.726491][ T5983] f2fs_handle_critical_error+0x37c/0x540 [ 157.726534][ T5983] f2fs_write_end_io+0xc1d/0xfd0 [ 157.726593][ T5983] __submit_merged_bio+0x256/0x650 [ 157.726634][ T5983] __submit_merged_write_cond+0x269/0x530 [ 157.726675][ T5983] f2fs_write_data_pages+0x2806/0x3360 [ 157.726756][ T5983] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 157.726807][ T5983] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 157.726893][ T5983] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 157.726951][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.726980][ T5983] ? __lock_acquire+0x6b5/0x2cf0 [ 157.727028][ T5983] ? f2fs_write_inode+0x3fb/0x5f0 [ 157.727059][ T5983] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 157.727093][ T5983] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 157.727131][ T5983] do_writepages+0x32e/0x550 [ 157.727168][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.727196][ T5983] ? reacquire_held_locks+0x104/0x190 [ 157.727226][ T5983] ? writeback_sb_inodes+0x42a/0x1940 [ 157.727281][ T5983] __writeback_single_inode+0x133/0x1060 [ 157.727320][ T5983] ? do_raw_spin_unlock+0xf5/0x210 [ 157.727362][ T5983] writeback_sb_inodes+0x92e/0x1940 [ 157.727407][ T5983] ? unwind_next_frame+0xa5/0x23c0 [ 157.727465][ T5983] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 157.727498][ T5983] ? do_raw_spin_lock+0x12b/0x2f0 [ 157.727587][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.727615][ T5983] ? rcu_is_watching+0x15/0xb0 [ 157.727645][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.727686][ T5983] wb_writeback+0x445/0xad0 [ 157.727729][ T5983] ? queue_io+0x2b1/0x450 [ 157.727775][ T5983] ? __pfx_wb_writeback+0x10/0x10 [ 157.727807][ T5983] ? do_raw_spin_lock+0x12b/0x2f0 [ 157.727866][ T5983] wb_workfn+0x3f8/0xef0 [ 157.727892][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.727921][ T5983] ? look_up_lock_class+0x57/0x110 [ 157.727982][ T5983] ? __pfx_wb_workfn+0x10/0x10 [ 157.728010][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.728044][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.728072][ T5983] ? do_raw_spin_lock+0x12b/0x2f0 [ 157.728104][ T5983] ? lock_acquire+0x106/0x330 [ 157.728132][ T5983] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 157.728172][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.728205][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.728237][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.728278][ T5983] ? process_scheduled_works+0xa0f/0x17a0 [ 157.728305][ T5983] ? process_scheduled_works+0xa0f/0x17a0 [ 157.728335][ T5983] process_scheduled_works+0xaec/0x17a0 [ 157.728402][ T5983] ? __pfx_process_scheduled_works+0x10/0x10 [ 157.728426][ T5983] ? do_raw_spin_lock+0x12b/0x2f0 [ 157.728466][ T5983] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 157.728508][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.728544][ T5983] worker_thread+0xda6/0x1360 [ 157.728594][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.728622][ T5983] ? __kthread_parkme+0x19c/0x1f0 [ 157.728662][ T5983] kthread+0x388/0x470 [ 157.728697][ T5983] ? __pfx_worker_thread+0x10/0x10 [ 157.728722][ T5983] ? __pfx_kthread+0x10/0x10 [ 157.728758][ T5983] ret_from_fork+0x51e/0xb90 [ 157.728792][ T5983] ? __pfx_ret_from_fork+0x10/0x10 [ 157.728818][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.728846][ T5983] ? __switch_to+0xc7d/0x1400 [ 157.728892][ T5983] ? __pfx_kthread+0x10/0x10 [ 157.728928][ T5983] ret_from_fork_asm+0x1a/0x30 [ 157.728988][ T5983] [ 157.728998][ T5983] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 157.816753][ T6598] fuse: Bad value for 'fd' [ 157.838558][ T6569] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.182 (6569) [ 158.142292][ T6602] loop2: detected capacity change from 0 to 64 [ 158.213973][ T6603] loop5: detected capacity change from 0 to 8 [ 159.661136][ T6614] loop5: detected capacity change from 0 to 164 [ 159.710335][ T6614] rock: directory entry would overflow storage [ 159.723693][ T6614] rock: sig=0x4543, size=28, remaining=18 [ 159.949026][ T6617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.274072][ T6618] blktrace: Concurrent blktraces are not allowed on loop6 [ 160.373807][ T29] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 160.387395][ T6621] loop4: detected capacity change from 0 to 64 [ 160.686388][ T6623] 9p: Bad value for 'rfdno' [ 160.773696][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 160.801394][ T6626] netlink: 68 bytes leftover after parsing attributes in process `syz.0.204'. [ 161.436973][ T29] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 161.445553][ T29] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 161.570356][ T29] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 161.580295][ T29] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 161.592124][ T29] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.608659][ T29] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 161.618047][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.785553][ T6634] fuse: Bad value for 'fd' [ 162.154702][ T6638] loop0: detected capacity change from 0 to 8 [ 162.881198][ T6638] SQUASHFS error: xz decompression failed, data probably corrupt [ 162.890573][ T6638] SQUASHFS error: Failed to read block 0x108: -5 [ 162.896968][ T6638] SQUASHFS error: Unable to read metadata cache entry [106] [ 162.904317][ T6638] SQUASHFS error: Unable to read inode 0x11f [ 162.963878][ T29] usb 3-1: usb_control_msg returned -32 [ 162.994999][ T29] usbtmc 3-1:16.0: can't read capabilities [ 164.445734][ T1211] usb 3-1: USB disconnect, device number 3 [ 164.501875][ T6653] fuse: Bad value for 'fd' [ 164.599821][ T6640] loop5: detected capacity change from 0 to 40427 [ 164.650944][ T6640] F2FS-fs (loop5): invalid crc value [ 164.690174][ T6655] fuse: Bad value for 'fd' [ 164.696883][ T6647] loop1: detected capacity change from 0 to 32768 [ 164.782419][ T6659] fuse: Bad value for 'fd' [ 165.048397][ T6660] loop3: detected capacity change from 0 to 8 [ 165.753958][ T6647] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.212 (6647) [ 166.745931][ T6663] loop0: detected capacity change from 0 to 8 [ 167.009535][ T6664] loop2: detected capacity change from 0 to 8 [ 167.312280][ T6660] SQUASHFS error: xz decompression failed, data probably corrupt [ 167.320363][ T6660] SQUASHFS error: Failed to read block 0x108: -5 [ 167.326842][ T6660] SQUASHFS error: Unable to read metadata cache entry [106] [ 167.334226][ T6660] SQUASHFS error: Unable to read inode 0x11f [ 167.403727][ T6663] SQUASHFS error: xz decompression failed, data probably corrupt [ 167.411746][ T6663] SQUASHFS error: Failed to read block 0x108: -5 [ 167.418208][ T6663] SQUASHFS error: Unable to read metadata cache entry [106] [ 167.425630][ T6663] SQUASHFS error: Unable to read inode 0x11f [ 167.538393][ T6661] autofs: Unknown parameter 'ÿ' [ 167.541156][ T6657] autofs: Unknown parameter 'ÿ' [ 167.557175][ T6664] SQUASHFS error: xz decompression failed, data probably corrupt [ 167.569125][ T6664] SQUASHFS error: Failed to read block 0x108: -5 [ 167.575940][ T6664] SQUASHFS error: Unable to read metadata cache entry [106] [ 167.583632][ T6664] SQUASHFS error: Unable to read inode 0x11f [ 168.087574][ T6640] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 168.111642][ T6670] netlink: 292 bytes leftover after parsing attributes in process `syz.3.216'. [ 168.143512][ T6640] F2FS-fs (loop5): Start checkpoint disabled! [ 168.161297][ T6672] fuse: Bad value for 'fd' [ 168.164925][ T6670] netlink: 292 bytes leftover after parsing attributes in process `syz.3.216'. [ 168.177223][ T6673] netlink: 68 bytes leftover after parsing attributes in process `syz.2.219'. [ 168.180834][ T6640] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 169.894690][ T6684] fuse: Bad value for 'fd' [ 170.235461][ T6683] 9p: Bad value for 'wfdno' [ 171.099155][ T6692] loop2: detected capacity change from 0 to 8 [ 171.781852][ T6692] SQUASHFS error: xz decompression failed, data probably corrupt [ 171.792457][ T6692] SQUASHFS error: Failed to read block 0x108: -5 [ 171.800096][ T6692] SQUASHFS error: Unable to read metadata cache entry [106] [ 171.807502][ T6692] SQUASHFS error: Unable to read inode 0x11f [ 172.074934][ T6695] binder: 6694:6695 ioctl c0306201 2000000001c0 returned -14 [ 172.258836][ T6699] loop3: detected capacity change from 0 to 512 [ 172.322736][ T6699] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 172.368333][ T6699] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 173.003688][ T6711] loop0: detected capacity change from 0 to 40427 [ 173.054166][ T6711] F2FS-fs (loop0): invalid crc value [ 173.135178][ T6711] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 173.155177][ T6711] F2FS-fs (loop0): Start checkpoint disabled! [ 173.180588][ T6711] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 173.202711][ T6711] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 173.232103][ T31] audit: type=1800 audit(1770851906.037:10): pid=6711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.234" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 173.745750][ T6720] fuse: Bad value for 'fd' [ 174.114109][ T6726] loop1: detected capacity change from 0 to 8 [ 174.222480][ T6726] SQUASHFS error: xz decompression failed, data probably corrupt [ 174.230532][ T6726] SQUASHFS error: Failed to read block 0x108: -5 [ 174.237003][ T6726] SQUASHFS error: Unable to read metadata cache entry [106] [ 174.244691][ T6726] SQUASHFS error: Unable to read inode 0x11f [ 174.698921][ T6725] loop5: detected capacity change from 0 to 256 [ 175.401469][ T5983] kworker/u8:9: attempt to access beyond end of device [ 175.401469][ T5983] loop0: rw=1, sector=77824, nr_sectors = 408 limit=40427 [ 175.449842][ T5983] kworker/u8:9: attempt to access beyond end of device [ 175.449842][ T5983] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 175.531456][ T5983] CPU: 0 UID: 0 PID: 5983 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 175.531496][ T5983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 175.531517][ T5983] Workqueue: writeback wb_workfn (flush-7:0) [ 175.531559][ T5983] Call Trace: [ 175.531568][ T5983] [ 175.531578][ T5983] dump_stack_lvl+0xe8/0x150 [ 175.531616][ T5983] f2fs_handle_critical_error+0x37c/0x540 [ 175.531658][ T5983] f2fs_write_end_io+0xc1d/0xfd0 [ 175.531720][ T5983] __submit_merged_bio+0x256/0x650 [ 175.531762][ T5983] __submit_merged_write_cond+0x269/0x530 [ 175.531802][ T5983] f2fs_write_data_pages+0x2806/0x3360 [ 175.531874][ T5983] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 175.531925][ T5983] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 175.532003][ T5983] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 175.532056][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.532084][ T5983] ? __lock_acquire+0x6b5/0x2cf0 [ 175.532127][ T5983] ? f2fs_write_inode+0x3fb/0x5f0 [ 175.532158][ T5983] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 175.532191][ T5983] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 175.532228][ T5983] do_writepages+0x32e/0x550 [ 175.532260][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.532289][ T5983] ? reacquire_held_locks+0x104/0x190 [ 175.532320][ T5983] ? writeback_sb_inodes+0x42a/0x1940 [ 175.532363][ T5983] __writeback_single_inode+0x133/0x1060 [ 175.532404][ T5983] ? do_raw_spin_unlock+0xf5/0x210 [ 175.532445][ T5983] writeback_sb_inodes+0x92e/0x1940 [ 175.532490][ T5983] ? unwind_next_frame+0xa5/0x23c0 [ 175.532551][ T5983] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 175.532586][ T5983] ? do_raw_spin_lock+0x12b/0x2f0 [ 175.532666][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.532695][ T5983] ? rcu_is_watching+0x15/0xb0 [ 175.532725][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.532764][ T5983] wb_writeback+0x445/0xad0 [ 175.532806][ T5983] ? queue_io+0x2b1/0x450 [ 175.532851][ T5983] ? __pfx_wb_writeback+0x10/0x10 [ 175.532885][ T5983] ? do_raw_spin_lock+0x12b/0x2f0 [ 175.532939][ T5983] wb_workfn+0x3f8/0xef0 [ 175.532967][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.532996][ T5983] ? look_up_lock_class+0x57/0x110 [ 175.533054][ T5983] ? __pfx_wb_workfn+0x10/0x10 [ 175.533082][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.533116][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.533145][ T5983] ? do_raw_spin_lock+0x12b/0x2f0 [ 175.533179][ T5983] ? lock_acquire+0x106/0x330 [ 175.533206][ T5983] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 175.533246][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.533278][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.533311][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.533346][ T5983] ? process_scheduled_works+0xa0f/0x17a0 [ 175.533373][ T5983] ? process_scheduled_works+0xa0f/0x17a0 [ 175.533402][ T5983] process_scheduled_works+0xaec/0x17a0 [ 175.533462][ T5983] ? __pfx_process_scheduled_works+0x10/0x10 [ 175.533487][ T5983] ? do_raw_spin_lock+0x12b/0x2f0 [ 175.533531][ T5983] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 175.533573][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.533608][ T5983] worker_thread+0xda6/0x1360 [ 175.533654][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.533683][ T5983] ? __kthread_parkme+0x19c/0x1f0 [ 175.533722][ T5983] kthread+0x388/0x470 [ 175.533757][ T5983] ? __pfx_worker_thread+0x10/0x10 [ 175.533783][ T5983] ? __pfx_kthread+0x10/0x10 [ 175.533819][ T5983] ret_from_fork+0x51e/0xb90 [ 175.533852][ T5983] ? __pfx_ret_from_fork+0x10/0x10 [ 175.533878][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.533907][ T5983] ? __switch_to+0xc7d/0x1400 [ 175.533953][ T5983] ? __pfx_kthread+0x10/0x10 [ 175.533989][ T5983] ret_from_fork_asm+0x1a/0x30 [ 175.534046][ T5983] [ 175.982189][ T5983] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 175.989593][ T5983] CPU: 0 UID: 0 PID: 5983 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 175.989624][ T5983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 175.989640][ T5983] Workqueue: writeback wb_workfn (flush-7:0) [ 175.989680][ T5983] Call Trace: [ 175.989690][ T5983] [ 175.989700][ T5983] dump_stack_lvl+0xe8/0x150 [ 175.989737][ T5983] f2fs_handle_critical_error+0x37c/0x540 [ 175.989780][ T5983] f2fs_write_end_io+0xc1d/0xfd0 [ 175.989844][ T5983] __submit_merged_bio+0x256/0x650 [ 175.989885][ T5983] __submit_merged_write_cond+0x269/0x530 [ 175.989926][ T5983] f2fs_write_data_pages+0x2806/0x3360 [ 175.990007][ T5983] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 175.990063][ T5983] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 175.990150][ T5983] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 175.990209][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.990239][ T5983] ? __lock_acquire+0x6b5/0x2cf0 [ 175.990287][ T5983] ? f2fs_write_inode+0x3fb/0x5f0 [ 175.990320][ T5983] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 175.990353][ T5983] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 175.990392][ T5983] do_writepages+0x32e/0x550 [ 175.990428][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.990456][ T5983] ? reacquire_held_locks+0x104/0x190 [ 175.990487][ T5983] ? writeback_sb_inodes+0x42a/0x1940 [ 175.990538][ T5983] __writeback_single_inode+0x133/0x1060 [ 175.990579][ T5983] ? do_raw_spin_unlock+0xf5/0x210 [ 175.990622][ T5983] writeback_sb_inodes+0x92e/0x1940 [ 175.990668][ T5983] ? unwind_next_frame+0xa5/0x23c0 [ 175.990727][ T5983] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 175.990762][ T5983] ? do_raw_spin_lock+0x12b/0x2f0 [ 175.990851][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.990881][ T5983] ? rcu_is_watching+0x15/0xb0 [ 175.990910][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.990951][ T5983] wb_writeback+0x445/0xad0 [ 175.990994][ T5983] ? queue_io+0x2b1/0x450 [ 175.991041][ T5983] ? __pfx_wb_writeback+0x10/0x10 [ 175.991074][ T5983] ? do_raw_spin_lock+0x12b/0x2f0 [ 175.991131][ T5983] wb_workfn+0x3f8/0xef0 [ 175.991158][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.991187][ T5983] ? look_up_lock_class+0x57/0x110 [ 175.991250][ T5983] ? __pfx_wb_workfn+0x10/0x10 [ 175.991276][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.991310][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.991339][ T5983] ? do_raw_spin_lock+0x12b/0x2f0 [ 175.991372][ T5983] ? lock_acquire+0x106/0x330 [ 175.991400][ T5983] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 175.991440][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.991474][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.991514][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.991550][ T5983] ? process_scheduled_works+0xa0f/0x17a0 [ 175.991577][ T5983] ? process_scheduled_works+0xa0f/0x17a0 [ 175.991607][ T5983] process_scheduled_works+0xaec/0x17a0 [ 175.991673][ T5983] ? __pfx_process_scheduled_works+0x10/0x10 [ 175.991698][ T5983] ? do_raw_spin_lock+0x12b/0x2f0 [ 175.991738][ T5983] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 175.991787][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.991824][ T5983] worker_thread+0xda6/0x1360 [ 175.991875][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.991908][ T5983] ? __kthread_parkme+0x19c/0x1f0 [ 175.991948][ T5983] kthread+0x388/0x470 [ 175.991982][ T5983] ? __pfx_worker_thread+0x10/0x10 [ 175.992007][ T5983] ? __pfx_kthread+0x10/0x10 [ 175.992043][ T5983] ret_from_fork+0x51e/0xb90 [ 175.992077][ T5983] ? __pfx_ret_from_fork+0x10/0x10 [ 175.992104][ T5983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.992133][ T5983] ? __switch_to+0xc7d/0x1400 [ 175.992180][ T5983] ? __pfx_kthread+0x10/0x10 [ 175.992218][ T5983] ret_from_fork_asm+0x1a/0x30 [ 175.992278][ T5983] [ 176.351931][ T5983] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 176.441431][ T6738] binder: 6737:6738 ioctl c0306201 2000000001c0 returned -14 [ 178.112452][ T5968] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 178.956738][ T5968] usb 6-1: Using ep0 maxpacket: 8 [ 179.367160][ T5968] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 179.394403][ T5968] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 179.413676][ T5968] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 179.433633][ T5968] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 179.456506][ T5968] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.499324][ T5968] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 179.543706][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 179.581870][ T5968] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.706372][ T5968] usb 6-1: can't set config #16, error -71 [ 179.713803][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 179.731723][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 179.757681][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 179.769029][ T6767] loop2: detected capacity change from 0 to 64 [ 179.775525][ T5968] usb 6-1: USB disconnect, device number 2 [ 179.808741][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 179.844018][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 179.879078][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.744024][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 180.753278][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.150753][ T6773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.467651][ T10] usb 2-1: usb_control_msg returned -32 [ 181.500934][ T10] usbtmc 2-1:16.0: can't read capabilities [ 181.814279][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 182.018597][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 182.036335][ T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 182.072191][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.107221][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 182.129599][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 182.152857][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.185909][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 182.414312][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.497366][ T6790] ubi: mtd0 is already attached to ubi31 [ 183.285785][ T5900] usb 2-1: USB disconnect, device number 2 [ 183.510546][ T10] usb 6-1: can't set config #16, error -71 [ 183.544247][ T10] usb 6-1: USB disconnect, device number 3 [ 184.085514][ T6784] loop3: detected capacity change from 0 to 32768 [ 184.109104][ T6783] loop2: detected capacity change from 0 to 32768 [ 184.137485][ T6784] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.255 (6784) [ 184.164232][ T6798] fuse: Bad value for 'fd' [ 184.197652][ T6784] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 184.404211][ T6784] BTRFS info (device loop3): using blake2b checksum algorithm [ 184.503113][ T6805] loop5: detected capacity change from 0 to 8 [ 185.084627][ T6784] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 185.084983][ T6784] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 185.137851][ T6805] SQUASHFS error: xz decompression failed, data probably corrupt [ 185.154921][ T6805] SQUASHFS error: Failed to read block 0x108: -5 [ 185.161252][ T6805] SQUASHFS error: Unable to read metadata cache entry [106] [ 185.168614][ T6805] SQUASHFS error: Unable to read inode 0x11f [ 185.219820][ T6783] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 185.237598][ T6784] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 185.237929][ T6784] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 185.298708][ T6784] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 185.326541][ T6783] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop2": -EINTR [ 185.340651][ T6784] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 185.340781][ T6783] XFS (loop2): log mount failed [ 185.524118][ T6784] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 185.524391][ T6784] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 185.610499][ T6784] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 185.678218][ T6784] BTRFS error (device loop3): open_ctree failed: -12 [ 185.957907][ T6833] loop5: detected capacity change from 0 to 64 [ 188.001893][ T6856] loop4: detected capacity change from 0 to 256 [ 188.643717][ T6863] netlink: 68 bytes leftover after parsing attributes in process `syz.1.274'. [ 189.188007][ T6872] fuse: Bad value for 'fd' [ 189.494364][ T6874] loop1: detected capacity change from 0 to 8 [ 189.550106][ T6874] SQUASHFS error: xz decompression failed, data probably corrupt [ 189.558211][ T6874] SQUASHFS error: Failed to read block 0x108: -5 [ 189.564661][ T6874] SQUASHFS error: Unable to read metadata cache entry [106] [ 189.572034][ T6874] SQUASHFS error: Unable to read inode 0x11f [ 190.875898][ T6881] loop3: detected capacity change from 0 to 256 [ 191.334040][ T6884] fuse: Bad value for 'fd' [ 191.661256][ T6888] loop2: detected capacity change from 0 to 8 [ 192.283624][ T6888] SQUASHFS error: xz decompression failed, data probably corrupt [ 192.291533][ T6888] SQUASHFS error: Failed to read block 0x108: -5 [ 192.297975][ T6888] SQUASHFS error: Unable to read metadata cache entry [106] [ 192.305818][ T6888] SQUASHFS error: Unable to read inode 0x11f [ 193.085157][ T6896] fuse: Unknown parameter 'user_i00000000000000000000' [ 193.153758][ T6896] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 193.257006][ T6896] overlayfs: missing 'lowerdir' [ 193.316534][ T6898] ubi: mtd0 is already attached to ubi31 [ 194.133404][ T6902] netlink: 276 bytes leftover after parsing attributes in process `syz.3.287'. [ 194.170117][ T6902] netlink: 276 bytes leftover after parsing attributes in process `syz.3.287'. [ 195.385574][ T6909] loop1: detected capacity change from 0 to 64 [ 195.513015][ T6914] loop3: detected capacity change from 0 to 256 [ 195.526824][ T6915] loop2: detected capacity change from 0 to 64 [ 195.537092][ T6916] netlink: 276 bytes leftover after parsing attributes in process `syz.4.290'. [ 198.412911][ T6931] loop1: detected capacity change from 0 to 64 [ 199.077629][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.091411][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.363932][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 199.521599][ T6940] fuse: Bad value for 'fd' [ 199.584237][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 199.889756][ T6942] loop5: detected capacity change from 0 to 8 [ 199.975260][ T6942] SQUASHFS error: xz decompression failed, data probably corrupt [ 199.983386][ T6942] SQUASHFS error: Failed to read block 0x108: -5 [ 199.989889][ T6942] SQUASHFS error: Unable to read metadata cache entry [106] [ 199.997286][ T6942] SQUASHFS error: Unable to read inode 0x11f [ 200.550202][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 200.623669][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 200.633443][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 200.727233][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 200.784970][ T6944] fuse: Unknown parameter 'user_id00000000000000000000' [ 200.860058][ T6944] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 200.865057][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.912861][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 200.943188][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.946063][ T6944] overlayfs: missing 'lowerdir' [ 201.514798][ T10] usb 4-1: usb_control_msg returned -32 [ 201.536454][ T10] usbtmc 4-1:16.0: can't read capabilities [ 201.683765][ T1211] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 201.899286][ T6949] loop0: detected capacity change from 0 to 40427 [ 201.959878][ T6949] F2FS-fs (loop0): invalid crc value [ 202.036001][ T6949] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 202.047778][ T6949] F2FS-fs (loop0): Start checkpoint disabled! [ 202.060498][ T6949] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 202.068840][ T6949] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 202.103693][ T1211] usb 6-1: Using ep0 maxpacket: 8 [ 202.130270][ T31] audit: type=1800 audit(1770851934.937:11): pid=6949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.302" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 202.651861][ T1211] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 202.661053][ T1211] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 202.671311][ T1211] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 202.683671][ T1211] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 202.693977][ T1211] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.707210][ T1211] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 202.717632][ T1211] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.914864][ T6955] fuse: Unknown parameter 'user_i00000000000000000000' [ 202.968175][ T6955] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 203.005230][ T6955] overlayfs: missing 'lowerdir' [ 203.137831][ T1036] kworker/u8:5: attempt to access beyond end of device [ 203.137831][ T1036] loop0: rw=1, sector=77824, nr_sectors = 408 limit=40427 [ 203.193708][ T1211] usb 6-1: usb_control_msg returned -32 [ 203.221519][ T1211] usbtmc 6-1:16.0: can't read capabilities [ 203.237222][ T30] usb 4-1: USB disconnect, device number 2 [ 203.243643][ T1036] kworker/u8:5: attempt to access beyond end of device [ 203.243643][ T1036] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 203.301777][ T1036] CPU: 0 UID: 0 PID: 1036 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 203.301810][ T1036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 203.301826][ T1036] Workqueue: writeback wb_workfn (flush-7:0) [ 203.301868][ T1036] Call Trace: [ 203.301878][ T1036] [ 203.301889][ T1036] dump_stack_lvl+0xe8/0x150 [ 203.301927][ T1036] f2fs_handle_critical_error+0x37c/0x540 [ 203.301973][ T1036] f2fs_write_end_io+0xc1d/0xfd0 [ 203.302034][ T1036] __submit_merged_bio+0x256/0x650 [ 203.302077][ T1036] __submit_merged_write_cond+0x269/0x530 [ 203.302120][ T1036] f2fs_write_data_pages+0x2806/0x3360 [ 203.302202][ T1036] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 203.302258][ T1036] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 203.302347][ T1036] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 203.302415][ T1036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.302445][ T1036] ? __lock_acquire+0x6b5/0x2cf0 [ 203.302494][ T1036] ? f2fs_write_inode+0x3fb/0x5f0 [ 203.302527][ T1036] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 203.302562][ T1036] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 203.302601][ T1036] do_writepages+0x32e/0x550 [ 203.302638][ T1036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.302667][ T1036] ? reacquire_held_locks+0x104/0x190 [ 203.302697][ T1036] ? writeback_sb_inodes+0x42a/0x1940 [ 203.302744][ T1036] __writeback_single_inode+0x133/0x1060 [ 203.302785][ T1036] ? do_raw_spin_unlock+0xf5/0x210 [ 203.302828][ T1036] writeback_sb_inodes+0x92e/0x1940 [ 203.302874][ T1036] ? unwind_next_frame+0xa5/0x23c0 [ 203.302933][ T1036] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 203.302968][ T1036] ? do_raw_spin_lock+0x12b/0x2f0 [ 203.303060][ T1036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.303090][ T1036] ? rcu_is_watching+0x15/0xb0 [ 203.303120][ T1036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.303161][ T1036] wb_writeback+0x445/0xad0 [ 203.303204][ T1036] ? queue_io+0x2b1/0x450 [ 203.303251][ T1036] ? __pfx_wb_writeback+0x10/0x10 [ 203.303286][ T1036] ? do_raw_spin_lock+0x12b/0x2f0 [ 203.303345][ T1036] wb_workfn+0x3f8/0xef0 [ 203.303373][ T1036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.303411][ T1036] ? look_up_lock_class+0x57/0x110 [ 203.303475][ T1036] ? __pfx_wb_workfn+0x10/0x10 [ 203.303503][ T1036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.303538][ T1036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.303572][ T1036] ? do_raw_spin_lock+0x12b/0x2f0 [ 203.303606][ T1036] ? lock_acquire+0x106/0x330 [ 203.303635][ T1036] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 203.303675][ T1036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.303709][ T1036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.303744][ T1036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.303782][ T1036] ? process_scheduled_works+0xa0f/0x17a0 [ 203.303808][ T1036] ? process_scheduled_works+0xa0f/0x17a0 [ 203.303839][ T1036] process_scheduled_works+0xaec/0x17a0 [ 203.303907][ T1036] ? __pfx_process_scheduled_works+0x10/0x10 [ 203.303932][ T1036] ? do_raw_spin_lock+0x12b/0x2f0 [ 203.303973][ T1036] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 203.304016][ T1036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.304054][ T1036] worker_thread+0xda6/0x1360 [ 203.304119][ T1036] kthread+0x388/0x470 [ 203.304157][ T1036] ? __pfx_worker_thread+0x10/0x10 [ 203.304183][ T1036] ? __pfx_kthread+0x10/0x10 [ 203.304221][ T1036] ret_from_fork+0x51e/0xb90 [ 203.304255][ T1036] ? __pfx_ret_from_fork+0x10/0x10 [ 203.304282][ T1036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.304311][ T1036] ? __switch_to+0xc7d/0x1400 [ 203.304358][ T1036] ? __pfx_kthread+0x10/0x10 [ 203.304403][ T1036] ret_from_fork_asm+0x1a/0x30 [ 203.304464][ T1036] [ 203.866481][ T1036] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 203.877608][ T1036] CPU: 0 UID: 0 PID: 1036 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 203.877640][ T1036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 203.877656][ T1036] Workqueue: writeback wb_workfn (flush-7:0) [ 203.877696][ T1036] Call Trace: [ 203.877707][ T1036] [ 203.877717][ T1036] dump_stack_lvl+0xe8/0x150 [ 203.877756][ T1036] f2fs_handle_critical_error+0x37c/0x540 [ 203.877801][ T1036] f2fs_write_end_io+0xc1d/0xfd0 [ 203.877860][ T1036] __submit_merged_bio+0x256/0x650 [ 203.877902][ T1036] __submit_merged_write_cond+0x269/0x530 [ 203.877944][ T1036] f2fs_write_data_pages+0x2806/0x3360 [ 203.878026][ T1036] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 203.878082][ T1036] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 203.878167][ T1036] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 203.878226][ T1036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.878256][ T1036] ? __lock_acquire+0x6b5/0x2cf0 [ 203.878301][ T1036] ? f2fs_write_inode+0x3fb/0x5f0 [ 203.878328][ T1036] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 203.878359][ T1036] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 203.878397][ T1036] do_writepages+0x32e/0x550 [ 203.878434][ T1036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.878464][ T1036] ? reacquire_held_locks+0x104/0x190 [ 203.878495][ T1036] ? writeback_sb_inodes+0x42a/0x1940 [ 203.878550][ T1036] __writeback_single_inode+0x133/0x1060 [ 203.878592][ T1036] ? do_raw_spin_unlock+0xf5/0x210 [ 203.878636][ T1036] writeback_sb_inodes+0x92e/0x1940 [ 203.878682][ T1036] ? unwind_next_frame+0xa5/0x23c0 [ 203.878741][ T1036] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 203.878777][ T1036] ? do_raw_spin_lock+0x12b/0x2f0 [ 203.878868][ T1036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.878897][ T1036] ? rcu_is_watching+0x15/0xb0 [ 203.878927][ T1036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.878969][ T1036] wb_writeback+0x445/0xad0 [ 203.879012][ T1036] ? queue_io+0x2b1/0x450 [ 203.879060][ T1036] ? __pfx_wb_writeback+0x10/0x10 [ 203.879093][ T1036] ? do_raw_spin_lock+0x12b/0x2f0 [ 203.879153][ T1036] wb_workfn+0x3f8/0xef0 [ 203.879181][ T1036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.879210][ T1036] ? look_up_lock_class+0x57/0x110 [ 203.879273][ T1036] ? __pfx_wb_workfn+0x10/0x10 [ 203.879302][ T1036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.879338][ T1036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.879366][ T1036] ? do_raw_spin_lock+0x12b/0x2f0 [ 203.879400][ T1036] ? lock_acquire+0x106/0x330 [ 203.879429][ T1036] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 203.879471][ T1036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.879506][ T1036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.879544][ T1036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.879582][ T1036] ? process_scheduled_works+0xa0f/0x17a0 [ 203.879609][ T1036] ? process_scheduled_works+0xa0f/0x17a0 [ 203.879639][ T1036] process_scheduled_works+0xaec/0x17a0 [ 203.879708][ T1036] ? __pfx_process_scheduled_works+0x10/0x10 [ 203.879734][ T1036] ? do_raw_spin_lock+0x12b/0x2f0 [ 203.879774][ T1036] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 203.879819][ T1036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.879856][ T1036] worker_thread+0xda6/0x1360 [ 203.879921][ T1036] kthread+0x388/0x470 [ 203.879958][ T1036] ? __pfx_worker_thread+0x10/0x10 [ 203.879984][ T1036] ? __pfx_kthread+0x10/0x10 [ 203.880022][ T1036] ret_from_fork+0x51e/0xb90 [ 203.880057][ T1036] ? __pfx_ret_from_fork+0x10/0x10 [ 203.880084][ T1036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.880113][ T1036] ? __switch_to+0xc7d/0x1400 [ 203.880161][ T1036] ? __pfx_kthread+0x10/0x10 [ 203.880199][ T1036] ret_from_fork_asm+0x1a/0x30 [ 203.880261][ T1036] [ 203.880271][ T1036] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 203.901275][ T6965] loop3: detected capacity change from 0 to 64 [ 205.924411][ T30] usb 6-1: USB disconnect, device number 4 [ 206.290808][ T6979] loop3: detected capacity change from 0 to 64 [ 206.368529][ T6981] loop4: detected capacity change from 0 to 512 [ 207.434937][ T6981] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 207.550342][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.315'. [ 207.569046][ T6981] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 207.760434][ T6994] netlink: 308 bytes leftover after parsing attributes in process `syz.0.305'. [ 207.835260][ T6994] netlink: 308 bytes leftover after parsing attributes in process `syz.0.305'. [ 207.939428][ T6981] snd_dummy snd_dummy.0: control 2:0:8:syz0:0 is already present [ 208.180415][ T31] audit: type=1804 audit(1770851940.977:12): pid=6998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.318" name="/newroot/56/file1" dev="fuse" ino=1 res=1 errno=0 [ 208.245682][ T7003] 9p: Bad value for 'wfdno' [ 208.381160][ T7010] loop0: detected capacity change from 0 to 1024 [ 208.624401][ T7015] netlink: 40 bytes leftover after parsing attributes in process `syz.4.322'. [ 210.637395][ T7027] loop3: detected capacity change from 0 to 64 [ 211.032416][ T5137] Bluetooth: hci0: command 0x0406 tx timeout [ 211.283837][ T5137] Bluetooth: hci4: command 0x0406 tx timeout [ 211.290836][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 211.298142][ T5835] Bluetooth: hci5: command 0x0406 tx timeout [ 211.304660][ T5137] Bluetooth: hci2: command 0x0406 tx timeout [ 211.310959][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 211.842878][ T7036] loop5: detected capacity change from 0 to 64 [ 214.165335][ T7052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.250212][ T7052] loop0: detected capacity change from 0 to 512 [ 214.730591][ T7054] loop1: detected capacity change from 0 to 512 [ 214.745326][ T7052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.768250][ T7052] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 214.794643][ T7054] EXT4-fs: Ignoring removed mblk_io_submit option [ 214.827290][ T7059] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 214.882336][ T7054] EXT4-fs (loop1): bad s_want_extra_isize: 11962 [ 214.965704][ T7052] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.333: corrupted inode contents [ 215.115515][ T7052] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #2: comm syz.0.333: mark_inode_dirty error [ 215.198754][ T7059] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 215.243783][ T7059] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 215.287606][ T7052] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.333: corrupted inode contents [ 215.311147][ T7059] overlayfs: missing 'lowerdir' [ 215.335929][ T7063] loop1: detected capacity change from 0 to 64 [ 215.352218][ T7052] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.333: mark_inode_dirty error [ 216.667607][ T7069] fuse: Bad value for 'fd' [ 216.698573][ T7070] binder: 7066:7070 ioctl c0306201 0 returned -14 [ 217.070441][ T7075] loop1: detected capacity change from 0 to 8 [ 217.189730][ T7075] SQUASHFS error: xz decompression failed, data probably corrupt [ 217.197668][ T7075] SQUASHFS error: Failed to read block 0x108: -5 [ 217.204112][ T7075] SQUASHFS error: Unable to read metadata cache entry [106] [ 217.211452][ T7075] SQUASHFS error: Unable to read inode 0x11f [ 217.637460][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.340'. [ 218.314924][ T7086] loop2: detected capacity change from 0 to 64 [ 218.654211][ T7091] netlink: 24 bytes leftover after parsing attributes in process `syz.5.346'. [ 219.467734][ T7091] loop5: detected capacity change from 0 to 2048 [ 219.547214][ T5818] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.603063][ T7091] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 219.718185][ T7091] UDF-fs: Scanning with blocksize 512 failed [ 219.771543][ T7100] loop3: detected capacity change from 0 to 256 [ 219.779816][ T7100] vfat: Unknown parameter 'nonumtaid' [ 219.943980][ T7091] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 219.986494][ T7100] syz.3.349 uses obsolete (PF_INET,SOCK_PACKET) [ 220.055472][ T31] audit: type=1800 audit(1770851952.867:13): pid=7091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.346" name="file1" dev="loop5" ino=819 res=0 errno=0 [ 220.421190][ T7111] 9p: Bad value for 'rfdno' [ 220.769840][ T7115] loop0: detected capacity change from 0 to 64 [ 220.969432][ T7117] binder: 7116:7117 ioctl c0306201 0 returned -14 [ 221.188666][ T7119] syzkaller0: entered promiscuous mode [ 221.197228][ T7119] syzkaller0: entered allmulticast mode [ 221.284463][ T7096] loop4: detected capacity change from 0 to 32768 [ 222.059892][ T7096] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.347 (7096) [ 222.156504][ T7096] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 222.201448][ T7096] BTRFS info (device loop4): using blake2b checksum algorithm [ 222.316531][ T7105] loop2: detected capacity change from 0 to 32768 [ 222.366853][ T7105] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.351 (7105) [ 222.441980][ T7141] loop3: detected capacity change from 0 to 64 [ 222.486906][ T7105] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 222.819265][ T7105] BTRFS info (device loop2): using sha256 checksum algorithm [ 222.868231][ T7141] syz.3.360: attempt to access beyond end of device [ 222.868231][ T7141] loop3: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 222.927617][ T7105] BTRFS info (device loop2): enabling ssd optimizations [ 222.941015][ T7105] BTRFS info (device loop2): turning on async discard [ 222.951810][ T7105] BTRFS info (device loop2): enabling free space tree [ 222.969568][ T7096] BTRFS error (device loop4): open_ctree failed: -4 [ 223.076439][ T7141] Buffer I/O error on dev loop3, logical block 512, async page read [ 223.144114][ T7141] syz.3.360: attempt to access beyond end of device [ 223.144114][ T7141] loop3: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 223.222177][ T5819] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 223.253712][ T7141] Buffer I/O error on dev loop3, logical block 56576, async page read [ 223.303311][ T7160] syz.3.360: attempt to access beyond end of device [ 223.303311][ T7160] loop3: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 223.366417][ T7160] Buffer I/O error on dev loop3, logical block 512, async page read [ 223.388108][ T7160] syz.3.360: attempt to access beyond end of device [ 223.388108][ T7160] loop3: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 223.443783][ T7160] Buffer I/O error on dev loop3, logical block 56576, async page read [ 223.895625][ T7179] loop0: detected capacity change from 0 to 64 [ 225.044852][ T7183] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 225.061206][ T7183] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 225.061715][ T7183] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 225.062153][ T7183] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 225.161602][ T7187] 9p: Bad value for 'rfdno' [ 225.402953][ T7191] binder: 7190:7191 ioctl c0306201 0 returned -14 [ 226.657267][ T7217] loop1: detected capacity change from 0 to 64 [ 228.183358][ T7231] fuse: Bad value for 'fd' [ 228.329263][ T7235] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 228.478901][ T7238] 9p: Bad value for 'rfdno' [ 228.543330][ T7229] netlink: 20 bytes leftover after parsing attributes in process `syz.2.381'. [ 228.677222][ T7225] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20002 [ 230.252730][ T7259] tipc: Started in network mode [ 230.268375][ T7259] tipc: Node identity 1619905ac5e, cluster identity 4711 [ 230.372456][ T7259] tipc: Enabled bearer , priority 0 [ 230.434353][ T7265] syzkaller0: entered promiscuous mode [ 231.264549][ T7265] syzkaller0: entered allmulticast mode [ 231.501989][ T10] tipc: Node number set to 3556347994 [ 231.553438][ T7267] loop2: detected capacity change from 0 to 40427 [ 231.570790][ T7267] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 231.579996][ T7267] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 231.590646][ T7267] F2FS-fs (loop2): Image doesn't support compression [ 231.598041][ T7267] F2FS-fs (loop2): build fault injection rate: 690 [ 231.605455][ T7267] F2FS-fs (loop2): build fault injection type: 0x35f7 [ 231.616160][ T7267] F2FS-fs (loop2): invalid crc value [ 231.706533][ T7267] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 231.716492][ T7267] F2FS-fs (loop2): Start checkpoint disabled! [ 231.736982][ T7267] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 231.751378][ T7267] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 231.758748][ T7267] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 231.797475][ T7258] tipc: Resetting bearer [ 231.827325][ T7272] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 231.848661][ T7267] F2FS-fs (loop2): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x11a/0xa90 [ 231.864009][ T7267] syz.2.395: attempt to access beyond end of device [ 231.864009][ T7267] loop2: rw=2049, sector=53248, nr_sectors = 720 limit=40427 [ 231.943851][ T7272] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 231.970858][ T7272] overlayfs: missing 'lowerdir' [ 231.982395][ T7258] tipc: Disabling bearer [ 232.183700][ T1211] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 232.502201][ T1211] usb 5-1: Using ep0 maxpacket: 8 [ 232.509507][ T1211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 232.521954][ T1211] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 232.531327][ T1211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.555266][ T1211] usb 5-1: config 0 descriptor?? [ 233.553213][ T1211] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 233.574849][ T3516] kworker/u8:7: attempt to access beyond end of device [ 233.574849][ T3516] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 233.616399][ T3516] CPU: 1 UID: 0 PID: 3516 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 233.616425][ T3516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 233.616439][ T3516] Workqueue: writeback wb_workfn (flush-7:2) [ 233.616471][ T3516] Call Trace: [ 233.616478][ T3516] [ 233.616487][ T3516] dump_stack_lvl+0xe8/0x150 [ 233.616514][ T3516] f2fs_handle_critical_error+0x37c/0x540 [ 233.616546][ T3516] f2fs_write_end_io+0xc1d/0xfd0 [ 233.616587][ T3516] __submit_merged_bio+0x256/0x650 [ 233.616616][ T3516] __submit_merged_write_cond+0x269/0x530 [ 233.616645][ T3516] f2fs_write_data_pages+0x2806/0x3360 [ 233.616699][ T3516] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 233.616738][ T3516] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 233.616796][ T3516] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 233.616835][ T3516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.616857][ T3516] ? __lock_acquire+0x6b5/0x2cf0 [ 233.616889][ T3516] ? f2fs_write_inode+0x3fb/0x5f0 [ 233.616912][ T3516] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 233.616937][ T3516] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 233.616964][ T3516] do_writepages+0x32e/0x550 [ 233.616990][ T3516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.617012][ T3516] ? reacquire_held_locks+0x104/0x190 [ 233.617038][ T3516] ? writeback_sb_inodes+0x42a/0x1940 [ 233.617071][ T3516] __writeback_single_inode+0x133/0x1060 [ 233.617100][ T3516] ? do_raw_spin_unlock+0xf5/0x210 [ 233.617130][ T3516] writeback_sb_inodes+0x92e/0x1940 [ 233.617171][ T3516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.617200][ T3516] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 233.617225][ T3516] ? do_raw_spin_lock+0x12b/0x2f0 [ 233.617284][ T3516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.617313][ T3516] ? rcu_is_watching+0x15/0xb0 [ 233.617335][ T3516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.617364][ T3516] wb_writeback+0x445/0xad0 [ 233.617394][ T3516] ? queue_io+0x2b1/0x450 [ 233.617427][ T3516] ? __pfx_wb_writeback+0x10/0x10 [ 233.617451][ T3516] ? do_raw_spin_lock+0x12b/0x2f0 [ 233.617491][ T3516] wb_workfn+0x3f8/0xef0 [ 233.617511][ T3516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.617532][ T3516] ? look_up_lock_class+0x57/0x110 [ 233.617575][ T3516] ? __pfx_wb_workfn+0x10/0x10 [ 233.617595][ T3516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.617620][ T3516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.617641][ T3516] ? do_raw_spin_lock+0x12b/0x2f0 [ 233.617664][ T3516] ? lock_acquire+0x106/0x330 [ 233.617685][ T3516] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 233.617713][ T3516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.617737][ T3516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.617761][ T3516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.617787][ T3516] ? process_scheduled_works+0xa0f/0x17a0 [ 233.617806][ T3516] ? process_scheduled_works+0xa0f/0x17a0 [ 233.617828][ T3516] process_scheduled_works+0xaec/0x17a0 [ 233.617872][ T3516] ? __pfx_process_scheduled_works+0x10/0x10 [ 233.617890][ T3516] ? do_raw_spin_lock+0x12b/0x2f0 [ 233.617919][ T3516] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 233.617949][ T3516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.617975][ T3516] worker_thread+0xda6/0x1360 [ 233.618010][ T3516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.618031][ T3516] ? __kthread_parkme+0x19c/0x1f0 [ 233.618059][ T3516] kthread+0x388/0x470 [ 233.618084][ T3516] ? __pfx_worker_thread+0x10/0x10 [ 233.618102][ T3516] ? __pfx_kthread+0x10/0x10 [ 233.618129][ T3516] ret_from_fork+0x51e/0xb90 [ 233.618154][ T3516] ? __pfx_ret_from_fork+0x10/0x10 [ 233.618173][ T3516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.618194][ T3516] ? __switch_to+0xc7d/0x1400 [ 233.618227][ T3516] ? __pfx_kthread+0x10/0x10 [ 233.618253][ T3516] ret_from_fork_asm+0x1a/0x30 [ 233.618299][ T3516] [ 233.618306][ T3516] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 234.073848][ T1211] usb 5-1: USB disconnect, device number 6 [ 234.677793][ T7304] loop3: detected capacity change from 0 to 1024 [ 234.834420][ T1211] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 234.925377][ T7304] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.034205][ T1211] usb 1-1: Using ep0 maxpacket: 8 [ 235.242855][ T7304] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 161808409 free clusters [ 235.397924][ T1211] usb 1-1: unable to get BOS descriptor or descriptor too short [ 235.406566][ T1211] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 235.423656][ T1211] usb 1-1: can't read configurations, error -71 [ 235.507078][ T37] ------------[ cut here ]------------ [ 235.512884][ T37] kernel BUG at fs/ext4/inode.c:2810! [ 235.552208][ T37] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 235.558679][ T37] CPU: 1 UID: 0 PID: 37 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 235.567972][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 235.578030][ T37] Workqueue: writeback wb_workfn (flush-7:3) [ 235.584037][ T37] RIP: 0010:ext4_do_writepages+0x45f4/0x4600 [ 235.590043][ T37] Code: c6 00 e1 c3 8b e8 0c 56 a5 fe 90 0f 0b e8 44 bc 41 ff 4c 89 f7 48 c7 c6 e0 e5 c3 8b e8 f5 55 a5 fe 90 0f 0b e8 2d bc 41 ff 90 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 [ 235.609651][ T37] RSP: 0018:ffffc90000ad6d40 EFLAGS: 00010293 [ 235.615712][ T37] RAX: ffffffff8282bbc3 RBX: 0000006210000000 RCX: ffff888141ac9e40 [ 235.623666][ T37] RDX: 0000000000000000 RSI: 0000004000000000 RDI: 0000000000000000 [ 235.631622][ T37] RBP: ffffc90000ad7150 R08: ffff8880543509f7 R09: 1ffff1100a86a13e [ 235.639579][ T37] R10: dffffc0000000000 R11: ffffed100a86a13f R12: dffffc0000000000 [ 235.647557][ T37] R13: 0000000000000001 R14: 0000004000000000 R15: 1ffff1100fa034c7 [ 235.655527][ T37] FS: 0000000000000000(0000) GS:ffff8881257c8000(0000) knlGS:0000000000000000 [ 235.664448][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.671013][ T37] CR2: 000020000000012a CR3: 000000005c7cc000 CR4: 0000000000350ef0 [ 235.678969][ T37] Call Trace: [ 235.682233][ T37] [ 235.685151][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 235.690093][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.695718][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 235.700649][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.706275][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.711906][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.717588][ T37] ? __bfs+0x153/0x290 [ 235.721648][ T37] ? __pfx_hlock_conflict+0x10/0x10 [ 235.726835][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.732452][ T37] ? check_path+0x21/0x40 [ 235.736770][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.742389][ T37] ? check_noncircular+0xda/0x150 [ 235.747498][ T37] ? __pfx_ext4_do_writepages+0x10/0x10 [ 235.753037][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.758742][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.764411][ T37] ? __lock_acquire+0x146e/0x2cf0 [ 235.769425][ T37] ? lock_acquire+0x106/0x330 [ 235.774092][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.779708][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.785380][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.791022][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.796653][ T37] ext4_writepages+0x241/0x3b0 [ 235.801444][ T37] ? __pfx_ext4_writepages+0x10/0x10 [ 235.806727][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.812351][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.817994][ T37] ? do_raw_spin_unlock+0xf5/0x210 [ 235.823096][ T37] ? __pfx_ext4_writepages+0x10/0x10 [ 235.828372][ T37] do_writepages+0x32e/0x550 [ 235.833213][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.838832][ T37] ? reacquire_held_locks+0x104/0x190 [ 235.844199][ T37] ? writeback_sb_inodes+0x42a/0x1940 [ 235.849568][ T37] __writeback_single_inode+0x133/0x1060 [ 235.855228][ T37] ? do_raw_spin_unlock+0xf5/0x210 [ 235.860337][ T37] writeback_sb_inodes+0x92e/0x1940 [ 235.865541][ T37] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 235.871167][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 235.876203][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.881875][ T37] ? rcu_is_watching+0x15/0xb0 [ 235.886659][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.892492][ T37] wb_writeback+0x445/0xad0 [ 235.897086][ T37] ? queue_io+0x2b1/0x450 [ 235.901418][ T37] ? __pfx_wb_writeback+0x10/0x10 [ 235.906444][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 235.911470][ T37] wb_workfn+0x3f8/0xef0 [ 235.915700][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.921320][ T37] ? look_up_lock_class+0x57/0x110 [ 235.926437][ T37] ? __pfx_wb_workfn+0x10/0x10 [ 235.931184][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.936811][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.942431][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 235.947448][ T37] ? lock_acquire+0x106/0x330 [ 235.952290][ T37] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 235.957653][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.963294][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.968916][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.974628][ T37] ? process_scheduled_works+0xa0f/0x17a0 [ 235.980330][ T37] ? process_scheduled_works+0xa0f/0x17a0 [ 235.986040][ T37] process_scheduled_works+0xaec/0x17a0 [ 235.991587][ T37] ? __pfx_process_scheduled_works+0x10/0x10 [ 235.997562][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 236.002584][ T37] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 236.007953][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 236.013838][ T37] worker_thread+0xda6/0x1360 [ 236.018515][ T37] kthread+0x388/0x470 [ 236.022588][ T37] ? __pfx_worker_thread+0x10/0x10 [ 236.027680][ T37] ? __pfx_kthread+0x10/0x10 [ 236.032258][ T37] ret_from_fork+0x51e/0xb90 [ 236.036840][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 236.041933][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 236.047553][ T37] ? __switch_to+0xc7d/0x1400 [ 236.052225][ T37] ? __pfx_kthread+0x10/0x10 [ 236.056816][ T37] ret_from_fork_asm+0x1a/0x30 [ 236.061578][ T37] [ 236.064574][ T37] Modules linked in: [ 236.069221][ T37] ---[ end trace 0000000000000000 ]--- [ 236.153506][ T7296] loop4: detected capacity change from 0 to 32768 [ 236.193864][ T7296] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.403 (7296) [ 236.216668][ T37] RIP: 0010:ext4_do_writepages+0x45f4/0x4600 [ 236.224182][ T37] Code: c6 00 e1 c3 8b e8 0c 56 a5 fe 90 0f 0b e8 44 bc 41 ff 4c 89 f7 48 c7 c6 e0 e5 c3 8b e8 f5 55 a5 fe 90 0f 0b e8 2d bc 41 ff 90 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 [ 236.245016][ T37] RSP: 0018:ffffc90000ad6d40 EFLAGS: 00010293 [ 236.251131][ T7296] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 236.261613][ T7296] BTRFS info (device loop4): using sha256 checksum algorithm [ 236.285842][ T37] RAX: ffffffff8282bbc3 RBX: 0000006210000000 RCX: ffff888141ac9e40 [ 236.294171][ T7296] BTRFS error (device loop4): cannot disable free-space-tree [ 236.301556][ T7296] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 236.317027][ T37] RDX: 0000000000000000 RSI: 0000004000000000 RDI: 0000000000000000 [ 236.325393][ T37] RBP: ffffc90000ad7150 R08: ffff8880543509f7 R09: 1ffff1100a86a13e [ 236.333431][ T37] R10: dffffc0000000000 R11: ffffed100a86a13f R12: dffffc0000000000 [ 236.342201][ T7296] BTRFS error (device loop4): open_ctree failed: -22 [ 236.364646][ T37] R13: 0000000000000001 R14: 0000004000000000 R15: 1ffff1100fa034c7 [ 236.372734][ T37] FS: 0000000000000000(0000) GS:ffff8881257c8000(0000) knlGS:0000000000000000 [ 236.405613][ T7296] Driver unsupported XDP return value 0 on prog (id 35) dev N/A, expect packet loss! [ 236.412109][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 236.464198][ T37] CR2: 00007f1e263e7198 CR3: 0000000059ced000 CR4: 0000000000350ef0 [ 236.472224][ T37] Kernel panic - not syncing: Fatal exception [ 236.478714][ T37] Kernel Offset: disabled [ 236.483113][ T37] Rebooting in 86400 seconds..